CVE-2020-5672

Stored Cross-site Scripting in KonaWiki3

KonaWiki3 における格納型 XSS (クロスサイトスクリプティング)

Because the sanitizing process is not performed properly, an arbitrary script is executed on the web browser of the user who accesses a wiki page containing a specially crafted content written by an attacker.

Disclosure Date

2020/11/17

Credit

stypr (@stereotype32)

CWE

  • CWE-79

Product URLs

Reference

Back