On Wed, Jun 6, 2018 at 11:44 AM Richard Hipp <[email protected]> wrote:
>
> On 6/6/18, Kyle Shannon <[email protected]> wrote:
> > Our security team found another XSS, shall I forward the link to the list?
>
> Yes, please
> --
> D. Richard Hipp
> [email protected]

https://www.fossil-scm.org/index.html/timeline?advm=0&chng=%3C/script%3E%3Cscript%3Ealert(150)%3C/script%3E&n=50&ss=c

-- 
Kyle
_______________________________________________
fossil-dev mailing list
[email protected]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/fossil-dev

Reply via email to