CVE-2023-50175
Stored Cross-Site Scripting (XSS) in GROWI App Settings (/admin/app), Markdown Settings (/admin/markdown), and Customization (/admin/customize)
GROWI のアプリ設定 (/admin/app)・マークダウン設定 (/admin/markdown)・カスタマイズ (/admin/customize) における格納型XSS (クロスサイトスクリプティング )
In GROWI v6.0.0 and earlier versions, it is possible to bypass security mechanisms and execute XSS by omitting the closing `>` in a tag string.
Disclosure Date
2023/12/13
Credit
azara (@a_zara_n)