Skip to content
Threat Feed
Subscribe

Product

EdgeEver (<= 1.112.0)

1 brief RSS
high advisory

Stored XSS Vulnerability in EdgeEver setMemoDragPreview

EdgeEver versions 1.112.0 and earlier contain a stored XSS vulnerability in the setMemoDragPreview function that allows for session token theft via malicious notebook or memo titles.

EdgeEver web-application xss injection session-hijacking
2t 1c