1 matches found
Winter: Stored XSS through Editor Settings custom styles
Impact Authenticated Backend Users with the backend.manageeditor "Manage editor settings" permission can provide custom styles through Settings → Editor Settings → Markup Styles that are compiled through the LESS CSS parser and rendered on every backend page. Previously, the compiled output was n...
8.1CVSS5.3AI score0.00253EPSS
SaveExploits0References3Affected Software1
20