KeystoneJS Cross-Site Scripting Vulnerability (CNVD-2017-32888)

KeystoneJS is an open source framework for developing database-driven websites, applications and APIs. A cross-site scripting vulnerability exists in versions of KeystoneJS prior to 4.0.0-beta.7. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML with the help ...