Description
SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element.
Unscored
CVE-2019-13948
EUVD-2019-5215GHSA-j52j-79w7-7mgp
SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads…
Published Jul 18, 2019 · Updated Aug 5, 2024 · Assigned by mitre