CVE-2018-7663

Published: 2018-03-05T07:29Z

Last Modified: 2024-11-21T04:12Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25. An unescaped template literal in the bio field of a user profile (resources/views/layouts/app.blade.php) allows for server-side template injection of arbitrary JavaScript. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt