CVE-2018-12429
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie.
CVSS 3.0 · 5.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products