Archive
27 March 2021
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 6.1
Cross-site scripting in bluemonday
bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string.