Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added yesterday9 views

Winter: Stored XSS through Brand Settings custom styles

Impact Users with the backend.managebranding "Customize the back-end" permission can provide custom CSS through Settings → Customize Backend → Styles that is compiled through the LESS CSS parser and rendered on every backend page. Previously, the compiled output was not sanitized, which could hav...

6.1CVSS5.3AI score0.0019EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder