CVE-2018-10230

Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455...

CVE-2018-10230

CVE-2018-10230 affects Zend Server prior to 9.1.3 where Zend Debugger is vulnerable to Cross-Site Scripting. Exploitation path identified in Nuclei templates uses the debug_host parameter to inject arbitrary HTML/JavaScript into the server response, enabling a user’s browser to execute scripts. I...