CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: stored xss vulnerability in flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject javascript to gain administrator privileges and also to execute javascript against other users (including unauthenticated users), via the name, title, or id parameter to plugins/dokuwiki/lib/plugins/changelinks/syntax.php.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2017-10-11
Last Modified Date: 2017-10-27