Description
Cross-site scripting (XSS) vulnerability in index.php in JosephErnest Void before 2015-10-02 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
References
- JVN#20649799 third-party-advisory
- JVNDB-2015-000184 third-party-advisory
- https://github.com/josephernest/void/commit/84b9615ae7fe233c40a80bf749085caaef6f4919