CVE-2016-7150

Cross-site scripting XSS vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name...

CVE-2016-7150

CVE-2016-7150 is an XSS vulnerability affecting b2evolution (version 6.7.5 and earlier). The issue allows remote authenticated users to inject arbitrary web script or HTML through the site name. Multiple connected sources corroborate XSS in b2evolution with similar details (NVD entry, Veracode su...