medium6.1
CVE-2018-19289
An issue was discovered in Valine v1.3.3.
Impact
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Valine.Js | Valine | Version 1.3.3 |