CVE-2018-19170

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...

CVE-2018-19170

CVE-2018-19170 affects JPress v1.0-rc.5. It is a stored XSS in the starter-tomcat-1.0/admin/setting URI, exploitable via the web_name parameter in the first three input fields. NVD reports CVSS v2 base score 3.5 (LOW) and CVSS v3 base score 4.8 (MEDIUM); attack vector is NETWORK with user interac...

CVE-2018-19170

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...