Untis Webuntis vulnerabilities

• untis webuntis Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information. CVE-2020-22453 6.1 MediumSeptember 24, 2020
• untis webuntis Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules. CVE-2020-10540 8.8 HighMarch 13, 2020