Vulnerabilities > Mubu > Curtain > 2018.11.11

DATE CVE VULNERABILITY TITLE RISK
2018-11-15 CVE-2018-19286 Cross-site Scripting vulnerability in Mubu Curtain 20181111
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value (along with an arbitrary username value), and then creating and sharing a note.
network
low complexity
mubu CWE-79
6.1