Design/Logic Flaw

2018-12-1019:29:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

CPENameOperatorVersion
nucleus_cmseq3.70

CPE	Name	Operator	Version
	nucleus_cms	eq	3.70

References

github.com/NucleusCMS/NucleusCMS/issues/84

github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf