CVE-2018-6313

2018-01-2522:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

46.3%

JSON

Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118.

CPENameOperatorVersion
wbce_cmseq1.1.11
wbce_cmseq1.0.0-rc.1
wbce_cmseq1.1.9
wbce_cmseq1.3.1
wbce_cmseq1.0.0-beta.1
wbce_cmseq1.1.2
wbce_cmseq1.2.0
wbce_cmseq1.1.0
wbce_cmseq1.0.0-beta.3
wbce_cmseq1.1.3

Name	Operator	Version
wbce_cms	eq	1.1.11
wbce_cms	eq	1.0.0-rc.1
wbce_cms	eq	1.1.9
wbce_cms	eq	1.3.1
wbce_cms	eq	1.0.0-beta.1
wbce_cms	eq	1.1.2
wbce_cms	eq	1.2.0
wbce_cms	eq	1.1.0
wbce_cms	eq	1.0.0-beta.3
wbce_cms	eq	1.1.3

Rows per page:

1-10 of 181

References

github.com/imsebao/404team/blob/master/wbce_cms_xss.md

0.001 Low

EPSS

Percentile

46.3%

JSON

Related for OSV:CVE-2018-6313