Security Advisory

CVE-2018-7663

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-05 07:00:00

Last updated 2024-08-05 06:31:05

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25. An unescaped template literal in the bio field of a user profile (resources/views/layouts/app.blade.php) allows for server-side template injection of arbitrary JavaScript.

← Browse all CVEs View on cve.org ↗