1 matches found
[20200602] - Core - Inconsistent default textfilter settings
The default settings of the global "textfilter" configuration doesn't block HTML inputs for 'Guest' users. With 3.9.19, the textfilter for new installations has been set to 'No HTML' for the groups 'Public', 'Guest' and 'Registered'...
7.5CVSS8AI score0.01326EPSS
SaveExploits0Affected Software1
20