CVE-2024-41349

Description

unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.

Affected Platforms

Weakness Type

CWE-79, CWE-79

References

• https://github.com/cdevroe/unmark/commit/52342dc4a908dc6ac6878f21a5850108ac84a4b…
• https://github.com/cdevroe/unmark/issues/290