CVE-2018-15199

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

CVE-2018-15199

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

CVE-2018-15199

CVE-2018-15199 affects AuraCMS 2.3. The vulnerability is a Cross-Site Scripting (XSS) flaw triggered via the Bukutamu → AddGuestbook action, allowing injection of arbitrary scripts. Exploitation details are not provided in the documents; CVSS metrics indicate a low/medium severity (CVSS v2 base 3...

CVE-2018-15199: Improper Neutralization of Input During Web Page Generation

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

PT-2018-12943

Name of the Vulnerable Software and Affected Versions AuraCMS version 2.3 Description The issue allows for XSS via a specific action, Bukutamu - AddGuestbook. Recommendations For AuraCMS version 2.3, consider restricting access to the AddGuestbook action in Bukutamu until a patch is available...