CVE-2019-18816

2019-11-0717:15:15

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.

CPENameOperatorVersion
popojicmseq2.0.0
popojicmseq2.0.1

CPE	Name	Operator	Version
	popojicms	eq	2.0.0
	popojicms	eq	2.0.1

References

github.com/PopojiCMS/PopojiCMS/issues/21