Description (CNA)
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/wekan/wekan/blob/master/CHANGELOG.md
- https://github.com/wekan/wekan/commit/47ac33d6c234359c31d9b5eae49ed3e793907279
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.