CVE-2016-5060

CVE-2016-5060 relates to multiple cross-site scripting (XSS) flaws in nGrinder prior to version 3.4. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the description, email, or username parameters to /user/save. Evidence across sources (NVD/NVD-listed CVE, CNVD...

CVE-2016-5060

Multiple cross-site scripting XSS vulnerabilities in nGrinder before 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 description, 2 email, or 3 username parameter to user/save...