Discuz! X3.4 allows XSS via admin.php because admincp/admincpsetting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code...
3.5CVSS4.9AI score0.00513EPSS
SaveExploits0References1Affected Software1
Cvelist•added 2018/11/22 9:0 p.m.•35 views
CVE-2018-19464
Discuz! X3.4 allows XSS via admin.php because admincp/admincpsetting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code...
