CVE-2018-19083: Improper Neutralization of Input During Web Page Generation

WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialcharsdecode function via the /?/publish/ajax/publishquestion/ questioncontent parameter...

PT-2018-14796

Name of the Vulnerable Software and Affected Versions WeCenter versions 3.2.0 through 3.2.2 Description The issue concerns a problem with the htmlspecialchars decode function in the views/default/question/index.tpl.html file. This is exploited via the "/?/publish/ajax/publish question/" API...