CVE-2018-16653

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

CVE-2018-16653 affects rejucms 2.1, with an XSS vulnerability in the ucenter/cms_user_add.php u_name parameter. Root cause is insufficient input filtering. Impact is user-side script execution in contexts where the affected page is rendered; CVSS metrics are provided (CVSS2: 4.3; CVSS3: 6.1), but...