Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/07/02 7:18 p.m.213 views

Cross-site scripting (XSS) from field and configuration text displayed in the Panel

On Saturday, @hdodov reported that the Panel's ListItem component used in the pages and files section for example displayed HTML in page titles as it is. This could be used for cross-site scripting XSS attacks. We used his report as an opportunity to find and fix XSS issues related to dynamic sit...

7.1CVSS0.2AI score0.00532EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder