PT-2018-10506

Name of the Vulnerable Software and Affected Versions YunoHost versions 2.7.2 through 2.7.14 Description The issue is related to two XSS vulnerabilities found in the profile edition page of the user panel of the YunoHost web application. These flaws can be exploited by injecting a JavaScript...

CVE-2018-11348: Improper Neutralization of Input During Web Page Generation

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session...