2 matches found
Cross site scripting
TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...
CVE-2018-18540