Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.
References
Link | Resource |
---|---|
https://github.com/havok89/Hoosk/issues/47 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-09-09 21:29
Updated : 2018-09-24 13:54
NVD link : CVE-2018-16772
Mitre link : CVE-2018-16772
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
hoosk
- hoosk