Default configuration

WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialcharsdecode function via the /?/publish/ajax/publishquestion/ questioncontent parameter...

CVE-2018-19083

WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialcharsdecode function via the /?/publish/ajax/publishquestion/ questioncontent parameter...

CVE-2018-19083

WeCenter versions 3.2.0–3.2.2 contain a cross‑site scripting (XSS) vulnerability in the template views/default/question/index.tpl.html where htmlspecialchars_decode is applied to the question_content parameter passed via /?/publish/ajax/publish_question/. The CVE entry specifies the affected comp...

CVE-2018-19083: Improper Neutralization of Input During Web Page Generation

WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialcharsdecode function via the /?/publish/ajax/publishquestion/ questioncontent parameter...