CVE-2020-19289

Jeesns 1.4.2 contains a stored XSS vulnerability in the /member/picture/album component, exploitable via a crafted payload in the New Album tab. Root cause is a failure to sanitize user input, enabling arbitrary web script/HTML execution. The connected sources consistently describe the same issue...