PT-2018-13757

Name of the Vulnerable Software and Affected Versions b3log Solo version 2.9.3 Description The issue allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator, exploiting an XSS vulnerability in the Input page under the Publish Articles...