Details

      Description

      1. Add Asset Publisher to a page
      2. Add at least one asset (e.g. a blog entry)
      3. Go to the Asset Publisher's Configuration
      4. Look for Display Style option under Enable Social bookmarks
      6. Using a tool like firebug, edit the value to one of the option set it to

      "><script>alert(777)</script>

      5. Save
      6. Click on the asset to read more

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              sharry.shi Sharry Shi
              Reporter:
              samuel.kong Samuel Kong
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                8 years, 15 weeks, 6 days ago

                  Packages

                  Version Package
                  6.0.X EE
                  6.1.1 CE GA2
                  6.1.20 EE GA2
                  --Sprint 11/12
                  6.2.0 CE M2