CVE-2018-17049

Name of the Vulnerable Software and Affected Versions CQU-LANKERS through 2017-11-02

Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the callback parameter in the "public/api.php" endpoint, specifically in an uploadpic action.

Recommendations For CQU-LANKERS through 2017-11-02, avoid using the callback parameter in the "public/api.php" endpoint for the uploadpic action until a fix is available. As a temporary workaround, consider restricting access to the uploadpic action to minimize the risk of exploitation.