CVE-2018-1000529

https://notcve.org/view.php?id=CVE-2018-1000529

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8. El plugin Grails Fields 2.2.7 contiene una vulnerabilidad de Cross Site Scripting (XSS) por el uso de la etiqueta display que puede resultar en XSS. La vulnerabilidad parece haber sido solucionada en la versión 2.2.8. • https://github.com/martinfrancois/CVE-2018-1000529 https://github.com/grails-fields-plugin/grails-fields/issues/278 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •