EUVD-2018-10273

Malware in sbrugna...

Design/Logic Flaw

Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page...

CVE-2018-18553: Improper Neutralization of Input During Web Page Generation

Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page...

PT-2018-14512

Name of the Vulnerable Software and Affected Versions Leanote version 2.6.1 Description The issue concerns a mishandling of the title field in the Blog Basic Setting during the rendering of the "likes" page, leading to an XSS issue. Recommendations For Leanote version 2.6.1, update to a version...