CVE-2018-14877

2018-08-0300:29:00

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page.

CPENameOperatorVersion
weaselcmseq0.2
weaselcmseq0.3.5
weaselcmseq0.1
weaselcmseq0.3.0
weaselcmseq0.3.3

Name	Operator	Version
weaselcms	eq	0.2
weaselcms	eq	0.3.5
weaselcms	eq	0.1
weaselcms	eq	0.3.0
weaselcms	eq	0.3.3

References

github.com/alterebro/WeaselCMS/issues/5