CVE-2018-10430

2018-04-2617:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

25.0%

JSON

An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of “System setting->site setting” of admin/index.php.

CPENameOperatorVersion
dilicmseq2.2.0-rc.1
dilicmseq2.1.3
dilicmseq2.1.1
dilicmseq2.0
dilicmseq2.0Final
dilicmseq2.2.0-rc.2
dilicmseq2.3.1
dilicmseq2.1.2
dilicmseq2.1.0
dilicmseq2.4.0

Name	Operator	Version
dilicms	eq	2.2.0-rc.1
dilicms	eq	2.1.3
dilicms	eq	2.1.1
dilicms	eq	2.0
dilicms	eq	2.0Final
dilicms	eq	2.2.0-rc.2
dilicms	eq	2.3.1
dilicms	eq	2.1.2
dilicms	eq	2.1.0
dilicms	eq	2.4.0

References

github.com/chekun/DiliCMS/issues/57

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for OSV:CVE-2018-10430