Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to dashboard/settings/links/, or (4) url parameter to dashboard/tools/pingservers/.
References
Configurations
History
No history.
Information
Published : 2015-07-16 15:59
Updated : 2024-02-04 18:53
NVD link : CVE-2015-5529
Mitre link : CVE-2015-5529
CVE.ORG link : CVE-2015-5529
JSON object : View
Products Affected
freereprintables
- articlefr
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')