EUVD-2018-0181

Malware in sbrugna...

CVE-2018-1000088: Improper Neutralization of Input During Web Page Generation

Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site Scripting XSS vulnerability in web view's OAuth app form, user authorization prompt web view that can result in Stored XSS on the OAuth Client's name will cause users interacting with it will execute payload. This attack appear to be...