EUVD-2017-14942

Malware in sbrugna...

XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email

Impact Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. For instance, the following URL execute an alter on the browser:...

TikTok: HTML Injection via Email Share

A HTML injection was found on a TikTok endpoint via the "nameofowner" parameter. We thank @lu3ky-13 for reporting this to our team...