CVE-2017-1000051

Published July 17th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content

cryptpad/cryptpad

Collaborative office suite, end-to-end encrypted and open-source.

GitHub

7.72K