CVE-2018-10298

CVE-2018-10298 concerns Discuz! DiscuzX up to X3.4, where a reflected XSS is possible via forum.php?mod=post&action=newthread. The root cause is that data/template/1_diy_portal_view.tpl.php does not restrict user-submitted content, enabling injected scripts. This is documented across multiple fee...

PT-2018-9808

Name of the Vulnerable Software and Affected Versions: Discuz! versions through X3.4 Description: The issue is related to reflected XSS. It can be exploited via the "forum.php?mod=post&action=newthread" endpoint because the data/template/1 diy portal view.tpl.php file does not restrict the conten...