CVE-2018-0654

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for crea...

Original description

The description as published by the source.

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory jvn.jp
advisory weseek.co.jp