CVE-2018-20731
A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php.
Don't forget to share
- Next story New Ethereum version postponed after discovery of serious security flaw
- Previous story US charges Ukrainian for SEC 2016 hack, others for insider trading
Tags
Android
app
Apple
apps
attack
Attacks
breach
Bug
Chinese
Code
Critical
Cyber
Cybersecurity
Data
Devices
Facebook
Firm
flaw
Flaws
Google
government
Group
hack
Hacked
Hacker
hackers
hacking
hit
Malware
Microsoft
Million
News
Online
Patches
Phishing
Privacy
Ransomware
Russian
Security
Software
Threat
Users
Vulnerabilities
vulnerability
Windows