CVE-2020-28847

Cross Site Scripting XSS vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment...

PT-2022-8907

Name of the Vulnerable Software and Affected Versions xCss Valine version 1.4.14 Description A Cross Site Scripting XSS issue exists in xCss Valine via the nick parameter to the "/classes/Comment" endpoint. This allows for potential malicious script execution. The estimated number of potentially...