Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-11512
HistoryMay 28, 2018 - 1:29 p.m.

Cross site scripting

2018-05-2813:29:00
PRIOn knowledge base
www.prio-n.com
3

0.005 Low

EPSS

Percentile

77.5%

Stored cross-site scripting (XSS) vulnerability in the “Website’s name” field found in the “Settings” page under the “General” menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to admin/settings/general.

CPENameOperatorVersion
witycmseq0.6.1

0.005 Low

EPSS

Percentile

77.5%