CVE-2023-50339
Stored Cross-Site Scripting (XSS) in GROWI Security Settings (/admin/security)
GROWI のセキュリティ設定 (/admin/security) における格納型クロスサイトスクリプティング
In GROWI v6.1.11 and earlier versions, it is possible to delete or deactivate the administrator’s own account by directly interacting with the API.
Disclosure Date
2023/12/13
Credit
azara (@a_zara_n)