PT-2018-13659

Name of the Vulnerable Software and Affected Versions Mezzanine CMS version 4.3.1 Description The issue allows for XSS via the "title" parameter at the "/admin/blog/blogcategory/add/? to field=id& popup=1" endpoint, which is accessible at "admin/blog/blogpost/add/". Recommendations For Mezzanine...