medium5.4

CVE-2023-29638

Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary we…

Impact

Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles.

Affected products

Vendor	Product	Affected versions
Winterchen	My-Site	before 2023-03-30

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://github.com/WinterChenS/my-site/issues/74
https://github.com/WinterChenS/my-site/issues/74