GHSA-gxmc-5wj3-jx64
Cross-site scripting in application/controllers/dropbox.php in JustWriting
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | hjue/justwriting | <= 1.0.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.
References
External links from the advisory. They lead to third-party sites.