CVE-2018-6518

2018-04-2614:29:00

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

JSON

Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php.

CPENameOperatorVersion
composreq10.RC31
composreq10.RC3-2
composreq10.RC17
composreq10.RC32
composreq10.RC8
composreq10beta1
composreq10.0.12
composreq10.0.11
composreq10.RC33
composreq10.RC25

Name	Operator	Version
composr	eq	10.RC31
composr	eq	10.RC3-2
composr	eq	10.RC17
composr	eq	10.RC32
composr	eq	10.RC8
composr	eq	10beta1
composr	eq	10.0.12
composr	eq	10.0.11
composr	eq	10.RC33
composr	eq	10.RC25