Security Advisory

CVE-2018-3755

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-01 17:00:00
Last updated 2024-08-05 04:50:30
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

XSS in sexstatic <=0.6.2 causes HTML injection in directory name(s) leads to Stored XSS when malicious file is embed with <iframe> element used in directory name.