2018-07-18 16:00:00
mitre
PUBLISHED
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie.