Kanboard 1.2.7 Cross Site Scripting

Reflected Cross-site Scripting Vulnerability in Kanboard 1.2.7 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Kanboard Affected Software: Kanboard Affected Versions: 1.2.7 Homepage: https://kanboard.org/ Vulnerability: Reflected Cross-site Scriptin...

CVE-2019-7324

CVE-2019-7324 affects Kanboard (pre-1.2.8). The issue is an XSS in the pagination sorting logic within app/Core/Paginator.php. Public data from multiple sources confirms the vulnerability exists in Kanboard up to version 1.2.7 and was addressed in Kanboard 1.2.8 with a release/commit cited in ref...