CVE-2018-18824

2019-04-2520:29:02

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.7%

JSON

WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.

CPENameOperatorVersion
wolfcmseq0.7.1
wolfcmseq0.8.0
wolfcmseq0.8.3.1
wolfcmseq0.7.0
wolfcmseq0.7.7
wolfcmseq0.7.8
wolfcmseq0.7.3
wolfcmseq0.7.5-sp1
wolfcmseq0.8.1
wolfcmseq0.8.3

Name	Operator	Version
wolfcms	eq	0.7.1
wolfcms	eq	0.8.0
wolfcms	eq	0.8.3.1
wolfcms	eq	0.7.0
wolfcms	eq	0.7.7
wolfcms	eq	0.7.8
wolfcms	eq	0.7.3
wolfcms	eq	0.7.5-sp1
wolfcms	eq	0.8.1
wolfcms	eq	0.8.3

Rows per page:

1-10 of 141

References

github.com/s-kustm

github.com/s-kustm/Subodh/blob/master/CVE-2018-18824.pdf

twitter.com/Subodhk62060242

www.linkedin.com/in/subodh-kumar-8a00b1125/