1 matches found
GHSA-VF6X-59HH-332F Formwork has a cross-site scripting (XSS) vulnerability in Site title
Summary The site title field at /panel/options/site/allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a considerable number of users. Impact The attack is widespread, leveraging what XSS can do...