PT-2018-13528

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue is related to stored XSS. It can be exploited via the "/admin/?/plugin/comment/settings" API endpoint. Recommendations For Frog CMS version 0.9.5, update to a version that contains a fix for this...

CVE-2018-16374: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...