Description
Vanilla before 2.6.1 allows XSS via the email field of a profile.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Request Forgery (4.4.2)
SharePoint CVE-2023-33160 Vulnerability (CVE-2023-33160)
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-40898)
Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26273)