CVE-2017-8298

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts Add New" action, and during creation of new tags and users...

CVE-2017-8298: Improper Neutralization of Input During Web Page Generation

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts Add New" action, and during creation of new tags and users...

PT-2017-18268

Name of the Vulnerable Software and Affected Versions cnvs.io Canvas version 3.3.0 Description The issue concerns a cross-site scripting XSS problem. It affects the title and content fields when creating a new post, as well as during the creation of new tags and users. Recommendations For cnvs.io...