Skip to content

CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-16205

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2019-01-09
Updated: 2024-08-05
Assigning organization: jpcert

Description

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WESEEK, Inc. GROWI

v3.2.3 and earlieraffected

References