Description
An issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app=group&ac=comment&ts=do&js=1 URI, as demonstrated by a crafted SVG document in the SRC attribute of an EMBED element.
Unscored
CVE-2019-16665
EUVD-2019-7230GHSA-xvfh-76gf-fgxq
An issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app=group&ac=comment&ts=do&js=1 URI, as demonstrat…
Published Sep 21, 2019 · Updated Aug 5, 2024 · Assigned by mitre