Code injection

The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...

CVE-2018-19286

The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...

CVE-2018-19286

The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...

CVE-2018-19286

The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...

CVE-2018-19286

CVE-2018-19286 describes an XSS vulnerability in the mubu note server. An attacker can trigger XSS by configuring an account with a crafted name value (together with an arbitrary username) when creating and sharing a note, enabling the attacker to inject script via the name field. The NVD summary...