CVE-2018-7746

creationtimestamp| type| source ---|---|--- 2018-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44416...

CVE-2018-7746

Cobub Razor 0.7.2 suffers an authentication bypass on /index.php?/manage/channel/modifychannel, enabling stored XSS triggered when an admin performs a subsequent /index.php?/manage/channel request. Evidence in multiple sources shows a craftable channel_name payload (e.g., xss), illustrating the v...