Unscored CVE-2018-16205 EUVD-2018-8057GHSA-9x8g-ghgv-j8cf

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page …

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal.

Vendor	Product	Affected	Fixed
WESEEK	GROWI	v3.2.3 and earlier	—