CVE-2018-16776

2018-09-1004:29:02

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

wityCMS 0.6.2 has XSS via the “Site Name” field found in the “Contact” “Configuration” page.

CPENameOperatorVersion
witycmseq0.4.0
witycmseq0.6.1
witycmseq0.3.0
witycmseq0.5.0
witycmseq0.6.0-beta1
witycmseq0.6.2
witycmseq0.6.0

Name	Operator	Version
witycms	eq	0.4.0
witycms	eq	0.6.1
witycms	eq	0.3.0
witycms	eq	0.5.0
witycms	eq	0.6.0-beta1
witycms	eq	0.6.2
witycms	eq	0.6.0

References

github.com/Creatiwity/wityCMS/issues/154