GHSA-W799-7525-RPR6 Casdoor vulnerable to Stored XSS via Application formCss / formSideHtml
A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument formCss/formCssMobile/formSideHtml results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the publi...