ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

Published Apr 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre