Posted by Curesec Research Team (CRT) on Nov 14

Security Advisory – Curesec Research Team

1. Introduction

Affected Open Source Social Network 3.5
Product:
Fixed in: 3.6
Fixed Version https://www.opensource-socialnetwork.org/downloads/
Link: ossn-v3.6-1443545762.zip
Vendor Contact: https://www.opensource-socialnetwork.org/contact
Vulnerability XSS
Type:
Remote Yes
Exploitable:
Reported to 09/29/2015
vendor:
Disclosed to 11/13/2015
public:…