Security Advisory

CVE-2018-13849

6.1
MEDIUM

Vulnerability Description

edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on preg_replace.
Published Date July 10, 2018
Official Source NIST NVD Advisory