Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.

Published Dec 28, 2017 · Updated Sep 16, 2024 · Assigned by mitre