ExpressionEngine · Report #2372332
Multiple XSS and open HTTP redirection
Validstatus
highseverity
29upvotes
16 Jul 2024disclosed
Summary
ExpressionEngine was affected by multiple cross-site scripting vulnerabilities that could allow an attacker to execute JavaScript in the browsers of targeted users.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.