PT-2015-4303

Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 5.2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the fm filter parameter to the "blogs/admin.php" API endpoint...