5 matches found
QMarkdown 安全漏洞
QMarkdown is an open source Quasar UI application extension for Quasar Framework to display inline markup. A security vulnerability exists in QMarkdown versions prior to 2.0.5, which stems from a cross-site scripting attack that can be caused by headers even if no-html is set...
CVE-2015-8032
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
Design/Logic Flaw
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
CVE-2015-8032
CVE-2015-8032 affects Textpattern 4.5.7. The vulnerability allows an unprivileged author to change an article's markup setting, indicating a permission/ownership flaw in how article markup is managed. The provided sources do not specify an exploit method or a patch/mitigation. The impact is limit...
