CVE-2017-15878

Published October 24th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature.

keystonejs/keystone

The superpowered headless CMS for Node.js — built with GraphQL and React

GitHub

9.88K