MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode.
References
Link | Resource |
---|---|
https://lncken.cn/?p=339 | Exploit Third Party Advisory |
Configurations
Information
Published : 2017-07-27 22:29
Updated : 2017-08-09 12:33
NVD link : CVE-2017-11716
Mitre link : CVE-2017-11716
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
metinfo_project
- metinfo