CVE-2018-19178

CVE-2018-19178 concerns JEESNS 1.3. The vulnerability is in com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java and allows stored XSS via an HTML EMBED element. This CVE entry notes it is a different issue from CVE-2018-17886. The available sources describe the affected component and t...