CVE-2018-0655

2018-09-0714:00:00

jpcert

www.cve.org

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

29.0%

JSON

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.

CNA Affected

[
  {
    "product": "GROWI",
    "vendor": "WESEEK, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "v.3.1.11 and earlier"
      }
    ]
  }
]