CVE-2018-0652

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the...

Original description

The description as published by the source.

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory jvn.jp
advisory weseek.co.jp