CVE-2018-16250

2019-06-2014:15:10

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

The “utilisateur” menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the “first name” and “last name” parameters.

CPENameOperatorVersion
witycmseq0.3.0
witycmseq0.6.0-beta1
witycmseq0.5.0
witycmseq0.6.1
witycmseq0.6.2
witycmseq0.4.0
witycmseq0.6.0

Name	Operator	Version
witycms	eq	0.3.0
witycms	eq	0.6.0-beta1
witycms	eq	0.5.0
witycms	eq	0.6.1
witycms	eq	0.6.2
witycms	eq	0.4.0
witycms	eq	0.6.0

References

github.com/Creatiwity/wityCMS/issues/156