Security Advisory

CVE-2018-16248

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-06-20 15:46:52

Last updated 2024-08-05 10:17:38

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, which allows remote attackers to inject arbitrary Web scripts or HTML via a carefully crafted site name in an admin-authenticated HTTP request.

← Browse all CVEs View on cve.org ↗