Description (CNA)
A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function create of the file src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| atjiu / pybbs | affected 6.0.0 |
CWE
CWE-79, CWE-94
References
- https://vuldb.com/?id.352020
- https://vuldb.com/?ctiid.352020
- https://vuldb.com/?submit.773779
- https://fx4tqqfvdw4.feishu.cn/docx/EKVgdqWIzo70C0xB5jxcb4IZnre?from=from_copylink
ADP enrichment
No English description supplied.
No references supplied.