Description
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.
References
- 20180619 XSS in Canopy login page mailing-list
Unscored
CVE-2018-9036
EUVD-2018-20640GHSA-2g53-pmw3-ccp9
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-priv…
Published Jun 20, 2018 · Updated Aug 5, 2024 · Assigned by mitre