Security Advisory
CVE-2015-7348
4.3
Vulnerability Description
Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to demo/en/asyncData/getNodesForBigData.php.
Published Date
December 7, 2015
Official Source
NIST NVD Advisory