1 result · Clear filters · Feed
-
Low 3.5
Casdoor dangerouslySetInnerHTML cross site scripting
A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument formCss/formCssMobile/formSideHtml results in cross site scripting. The attack can be initiated remotely. The …