Skip to content
OpenAdvisories
Unscored CVE-2017-9244 EUVD-2017-18181GHSA-pqjg-38x3-5w4m

Cross-site scripting (XSS) vulnerability in the Trello app before 4.0.8 for iOS might allow remote attackers to inject arbitrary web script…

Published Aug 2, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Trello app before 4.0.8 for iOS might allow remote attackers to inject arbitrary web script or HTML by uploading and attaching a crafted photo to a Card.

References