CVE-2018-20136

2018-12-1318:00:00

mitre

www.cve.org

xss

fuel cms

layout variables

new-page creation

uri

EPSS

0.001

Percentile

24.8%

JSON

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI.

References

github.com/CCCCCrash/POCs/tree/master/Web/fuel-cms/xss2

EPSS

0.001

Percentile

24.8%

JSON

Related for CVELIST:CVE-2018-20136