1 matches found
CVE-2019-9142: Improper Neutralization of Input During Web Page Generation
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
6.1CVSS5.8AI score0.00802EPSS
SaveExploits0References2
20