Description
Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be accessed directly by an administrator, or through CSRF.
Unscored
CVE-2018-9169
EUVD-2018-20766GHSA-pf9c-4vfw-gppq
Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be accessed directly by an a…
Published Apr 15, 2018 · Updated Aug 5, 2024 · Assigned by mitre