QMarkdown 安全漏洞

QMarkdown is an open source Quasar UI application extension for Quasar Framework to display inline markup. A security vulnerability exists in QMarkdown versions prior to 2.0.5, which stems from a cross-site scripting attack that can be caused by headers even if no-html is set...

CVE-2015-8032

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

Design/Logic Flaw

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

CVE-2015-8032

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

CVE-2015-8032

CVE-2015-8032 affects Textpattern 4.5.7. The vulnerability allows an unprivileged author to change an article's markup setting, indicating a permission/ownership flaw in how article markup is managed. The provided sources do not specify an exploit method or a patch/mitigation. The impact is limit...