The Add page option in my little forum 2.4.12 allows XSS via the Title field.
References
| Link | Resource |
|---|---|
| http://owendarlene.com/stored-xss-my-little-forum/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-08-05 01:29
Updated : 2018-09-27 17:11
NVD link : CVE-2018-14936
Mitre link : CVE-2018-14936
JSON object : View
Products Affected
mylittleforum
- my_little_forum
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
