mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
639 B
639 B
CVE-2019-15950
Description
The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.
POC
Reference
- https://github.com/zerohax/RedmineUP-XSS/blob/master/vcard-upload-xss
- https://github.com/zerohax/RedmineUP-XSS/blob/master/vcard-upload-xss
Github
No PoCs found on GitHub currently.