7 matches found
Code injection
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
CVE-2019-9142
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
CVE-2019-9142
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
CVE-2019-9142
The CVE-2019-9142 issue affects b3log Symphony (Sym) prior to v3.4.7. The vulnerability is an XSS flaw exposed via userIntro and userNickname fields in processor/SettingsProcessor.java. Connections across multiple sources confirm the root cause is input handling in SettingsProcessor.java, leading...
CVE-2019-9142
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
CVE-2019-9142: Improper Neutralization of Input During Web Page Generation
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
PT-2019-19386
Name of the Vulnerable Software and Affected Versions b3log Symphony versions prior to 3.4.7 Description An issue exists where XSS is possible via the userIntro and userNickname fields to the processor/SettingsProcessor.java file. Recommendations For versions prior to 3.4.7, update to version 3.4...