KeystoneJS Cross-Site Scripting Vulnerability (CNVD-2017-32888)

KeystoneJS is an open source framework for developing database-driven websites, applications and APIs. A cross-site scripting vulnerability exists in versions of KeystoneJS prior to 4.0.0-beta.7. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML with the help ...

CVE-2017-15881

Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the "content brief" or "content extended" field, a different vulnerability than CVE-2017-15878...

PT-2017-14260

Name of the Vulnerable Software and Affected Versions KeystoneJS versions prior to 4.0.0 Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML, specifically via the content brief or content extended field. This is a Cross-Site Scripting XSS issue...

CVE-2017-15881: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the "content brief" or "content extended" field, a different vulnerability than CVE-2017-15878...