← Back to CVE List
CVE-2018-14527
Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example, it considers SCRIPT and IMG elements, but does not consider VIDEO elements).
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt