In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points URI, allowing remote attacks. Any Web script or HTML can be inserted by an admin-authenticated user via a crafted web site name.
References
Link | Resource |
---|---|
https://github.com/b3log/symphony/issues/729 | Exploit Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-06-20T13:54:12
Updated: 2019-06-20T13:54:12
Reserved: 2018-08-30T00:00:00
Link: CVE-2018-16249
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-06-20T14:15:10.593
Modified: 2019-06-21T18:55:06.653
Link: CVE-2018-16249
JSON object: View
Redhat Information
No data.
CWE