Description
A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php.
Unscored
CVE-2018-20731
EUVD-2018-13276GHSA-5wgv-f4v7-wq3c
A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via …
Published Jan 17, 2019 · Updated Aug 5, 2024 · Assigned by mitre