Medium severity4.8NVD Advisory· Published Sep 10, 2018· Updated Jun 17, 2026
CVE-2018-16805
CVE-2018-16805
Description
In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator.
Patches
Vulnerability mechanics
References
1- github.com/b3log/solo/issues/12501nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.