CVE-2022-28920

Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2022-05-12

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Tieba-cloud-sign (Moecraft)

References

• https://github.com/MoeNetwork/Tieba-Cloud-Sign/issues/156