cve/CVE-2017-8298.md at 9cc2023bd8dbe0ab8c5f051fa9a43f1e04594987 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

596 B

Raw Blame History

CVE-2017-8298

Description

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts > Add New" action, and during creation of new tags and users.

POC

Reference

https://github.com/cnvs/canvas/issues/331

Github

No PoCs found on GitHub currently.