Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: siyuan-note Component: Solo Clear all filters
TI-2018-11633 CVE-2018-16248 · GHSA-59wj-w49p-mx75

b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID…

Priority LOW 29

b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, which allows remote attackers to inject arbitrary Web scripts or HTML via a careful…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00996 Published 2019-06-20 No fix listed CWE-79
TI-2018-12034 CVE-2018-16805 · GHSA-v66f-9xx4-8g7q

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of…

Priority LOW 23

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0076 Published 2018-09-10 No fix listed CWE-79