mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 09:12:08 +00:00
676 B
676 B
CVE-2018-19919
Description
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element.
POC
Reference
- https://github.com/pixelimity/pixelimity/issues/19
- https://github.com/pixelimity/pixelimity/issues/19