description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.
problem types: Cross-site scripting
affected:
{
product: GROWI
vendor: WESEEK, Inc.
versions:
status: affected, version: v.3.1.11 and earlier
}