Unscored CVE-2019-6018 EUVD-2019-15586GHSA-98qv-39wh-94xp

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier (NetCommons3.x) allows remote attackers to inject arbitrary web script o…

Published Dec 26, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: The NetCommons Project Product: NetCommons

Description

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier (NetCommons3.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
The NetCommons Project	NetCommons	3.2.2 and earlier (NetCommons3.x)	—

References

https://www.netcommons.org/blogs/blog_entries/view/6/7b40ca16fc8358a57d0e178c931c0027?frame_id=13
http://jvn.jp/en/jp/JVN74530672/index.html