Description (CNA)
An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Crafter Software / Crafter CMS | affected 3.1 through 3.1.17 |
CWE
CWE-117
References
ADP enrichment
No English description supplied.