medium6.1
CVE-2018-9928
Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl pa…
Impact
Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metinfo | Metinfo | Version 6.0.0 |