← CVE Intelligence

CVE-2018-16484

HackerOne / m-server PUBLISHED

Description (CNA)

A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.

Affected (CNA)

Vendor / productVersions
HackerOne / m-serveraffected <1.4.2

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.