CVE-2018-19170: Improper Neutralization of Input During Web Page Generation

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...

PT-2018-14839

Name of the Vulnerable Software and Affected Versions JPress version 1.0-rc.5 Description The issue concerns stored XSS that can be triggered via the first three input fields. This is demonstrated by the web name parameter in the "/starter-tomcat-1.0/admin/setting" API endpoint. Recommendations F...