30 Jun
2015
30 Jun
'15
10:49 a.m.
ID: 2390
Title: Fixed possible XSS issue on views
Component: Multisite
Level: 1
Class: Security Fix
Version: 1.2.7i3
It was possible to use the view_name variable to inject HTML/Javascript
code into the status GUI views.