CVE-2018-7202 An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page.
MediumCVSS 6.1
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| projectsend | < r1053 | r1053 |
References
- www.projectsend.org release-notes third-party-advisory