2 matches found
CVE-2018-19178: Improper Neutralization of Input During Web Page Generation
In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...
5.4CVSS6AI score0.00556EPSS
SaveExploits1References2
CVE-2018-17886: Improper Neutralization of Input During Web Page Generation
An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a...
5.4CVSS5.9AI score0.00663EPSS
SaveExploits1References2
20