medium6.1
CVE-2018-17049
CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action.
Impact
CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cqu Lankers Project | Cqu Lankers | through 2017-11-02 |