Lucene search
+L

2 matches found

CVE
CVE
•added 2018/05/12 4:00 a.m.•65 views

CVE-2018-11011

CVE-2018-11011 affects ruibaby Halo 0.0.2 and is a stored XSS via the commentAuthor field directed at FrontCommentController.java. Affected component: Halo 0.0.2; root cause: improper handling of input in commentAuthor leading to script/HTML execution. Impact (per records): Confidentiality None, ...

6.1CVSS5.8AI score0.0062EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/12 12:00 a.m.•2 views

CVE-2018-11011: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...

6.1CVSS6.3AI score0.0062EPSS
SaveExploits1References2
Rows per page
Query Builder