Design/Logic Flaw

2018-12-1919:29:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

CMSimple 4.7.5 has XSS via an admin’s upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI.

CPENameOperatorVersion
cmsimpleeq4.7.5

CPE	Name	Operator	Version
	cmsimple	eq	4.7.5

References

github.com/security-breachlock/CVE-2018-19508/blob/master/Persistent-XSS.pdf