Description (CNA)
The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ShinHer Information Co., LTD. / ShinHer StudyOnline System | affected unspecified through 2021 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.