CVE-2018-15917
Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to session/language.
参照URL
- advisory github.com
- report hackpuntes.com
- report exploit-db.com