CVE-2018-11011

CVE-2018-11011 affects ruibaby Halo 0.0.2 and is a stored XSS via the commentAuthor field directed at FrontCommentController.java. Affected component: Halo 0.0.2; root cause: improper handling of input in commentAuthor leading to script/HTML execution. Impact (per records): Confidentiality None, ...

PT-2018-10239

Name of the Vulnerable Software and Affected Versions ruibaby Halo version 0.0.2 Description The issue is related to stored XSS via the commentAuthor field. This field is used in the FrontCommentController.java file, allowing for potential exploitation. Recommendations For ruibaby Halo version...

CVE-2018-11011: Improper Neutralization of Input During Web Page Generation

ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...