Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-1107: fixes #177, possible XSS in Media Manager plugin · flatpressblog/flatpress@d3f3294

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

CVE
#xss#vulnerability#git

Skip to content

    • Actions

      Automate any workflow

    • Packages

      Host and manage packages

    • Security

      Find and fix vulnerabilities

    • Codespaces

      Instant dev environments

    • Copilot

      Write better code with AI

    • Code review

      Manage code changes

    • Issues

      Plan and track work

    • Discussions

      Collaborate outside of code

*   Explore
*   All features
*   Documentation
*   GitHub Skills
*   Blog
    • For

    • Enterprise

    • Teams

    • Startups

    • Education

    • By Solution

    • CI/CD & Automation

    • DevOps

    • DevSecOps

    • Case Studies

    • Customer Stories

    • Resources

    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
    

*   Repositories
*   Topics
*   Trending
*   Collections
  • Pricing

  • Notifications

  • Fork 49

  • Code

  • Issues 70

  • Pull requests 8

  • Actions

  • Projects

  • Wiki

  • Security

  • Insights

Permalink

Browse files

fixes #177, possible XSS in Media Manager plugin

  • Loading branch information

azett committed

Dec 25, 2022

1 parent e53acde commit d3f3294

Showing 1 changed file with 1 addition and 1 deletion.

@@ -233,7 +233,7 @@ function main() {

function onsubmit($data = NULL) {

if (isset($_POST [‘mm-newgallery’])) {

$newgallery = $_POST [‘mm-newgallery-name’];

$newgallery = strip_tags($_POST [‘mm-newgallery-name’]);

if ($newgallery == “”) {

$this->smarty->assign('success’, -3);

return 2;

0 comments on commit d3f3294

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda