CVE-2018-3755 Vulnerability Details

  /     /     /  

CVE-2018-3755 Metadata Quick Info

CVE Published: 01/06/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: hackerone | Vendor: HackerOne | Product: sexstatic
Status : PUBLISHED

---

CVE-2018-3755 Description

XSS in sexstatic <=0.6.2 causes HTML injection in directory name(s) leads to Stored XSS when malicious file is embed with