First published: Wed May 22 2019(Updated: )
An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Projectsend Projectsend | <r1053 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2018-7202.
The severity level of CVE-2018-7202 is medium.
The affected software for CVE-2018-7202 is ProjectSend before r1053.
The Common Weakness Enumeration (CWE) ID for CVE-2018-7202 is 79.
To fix CVE-2018-7202, you should update to version r1053 or later of ProjectSend.