Description
Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to demo/en/asyncData/getNodesForBigData.php.
Unscored
CVE-2015-7348
EUVD-2015-7272GHSA-jqpq-72xc-xqvj
Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or H…
Published Dec 7, 2015 · Updated Aug 6, 2024 · Assigned by mitre