CVE-2019-17489

Jiangnan Online Judge (jnoj) 0.8.0 is affected by a Cross-Site Scripting (XSS) flaw that can be triggered via the Problem[title] field on the endpoints web/polygon/problem/create, web/polygon/problem/update, or web/admin/problem/create. The root cause is unvalidated client-side data in these web ...