CVE-2019-17493

CVE-2019-17493 affects Jiangnan Online Judge (jnoj) 0.8.0. It has a cross-site scripting (XSS) vulnerability triggered by the Problem[sample_input] parameter in web/admin/problem/create or web/polygon/problem/update. Root cause per CNVD entry is lack of proper validation of client-side data. Impa...