Description
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
Remediation
References
Related Vulnerabilities
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3518)
WordPress Plugin Synchi Arbitrary File Deletion (5.1)
WordPress Plugin Admin renamer extended Cross-Site Scripting (3.2)
Joomla! Core 1.5.x Multiple Cross-Site Scripting Vulnerabilities (1.5.0 - 1.5.20)
ReviveAdserver Improper Access Control Vulnerability (CVE-2015-7367)