Baidu kityminder suffers from cross-site scripting vulnerability

KityMinder is an online brain map editing tool developed by Baidu FEX team. A cross-site scripting vulnerability exists in Baidu kityminder. The program fails to filter user-supplied input, allowing an attacker to frame a malicious web page and trick the user into parsing it to execute arbitrary...