medium5.4
CVE-2018-12429
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie.
Impact
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jeesns | Jeesns | through 1.2.1 |