CVE-2018-12429
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie.
Published: 2018-07-18 · CVSS: Unscored
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7