CVE-2019-8349

Published: 2019-05-08T14:29Z

Last Modified: 2024-11-21T04:49Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt