CVE-2018-18308

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ aka the image upload area...

CVE-2018-18308: Improper Neutralization of Input During Web Page Generation

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ aka the image upload area...

PT-2018-14398

Name of the Vulnerable Software and Affected Versions BigTree version 4.2.23 Description A Stored XSS issue has been found in the image upload area, specifically at the "/admin/ajax/file-browser/upload/" API endpoint. Recommendations For BigTree version 4.2.23, update to a newer version that...