-
Bug
-
Resolution: Fixed
-
Medium
-
2.0.3, 2.1.5, 2.2.10, 2.3.3, 2.4.5, 2.5.8, 2.6.2, 2.7.2
-
None
Vulnerable URL's:
- signup.action
- dosignup.action
on username, email, password, confirm, fullname
- is blocked by
-
CONFSERVER-9627 Velocity does not automatically escape HTML entities when substituting variables
- Closed