The Add page option in my little forum 2.4.12 allows XSS via the Title field.
References
Link | Resource |
---|---|
http://owendarlene.com/stored-xss-my-little-forum/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-08-04 18:29
Updated : 2018-09-27 10:11
NVD link : CVE-2018-14936
Mitre link : CVE-2018-14936
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
mylittleforum
- my_little_forum