PT-2018-8990

Name of the Vulnerable Software and Affected Versions GROWI versions 3.1.11 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of the admin page. Recommendations For GROWI versions...

CVE-2018-0652: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page...

JVN#18716340: Multiple cross-site scripting vulnerabilities in GROWI

GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in the UserGroup Management section of admin page CWE-79 - CVE-2018-0652 Version| Vector| Score ---|---|--- CVSS v3|...