CVE-2018-5249

Published: 2018-01-05T20:29Z

Last Modified: 2024-11-21T04:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin function in index.php). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt