PT-2018-8993

Name of the Vulnerable Software and Affected Versions GROWI versions 3.1.11 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of the admin page. Recommendations For GROWI versions 3.1.11 a...

PT-2018-8990

Name of the Vulnerable Software and Affected Versions GROWI versions 3.1.11 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of the admin page. Recommendations For GROWI versions...

JVN#18716340: Multiple cross-site scripting vulnerabilities in GROWI

GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in the UserGroup Management section of admin page CWE-79 - CVE-2018-0652 Version| Vector| Score ---|---|--- CVSS v3|...