CVE-2018-14877

An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page...

CVE-2018-14877

WeaselCMS v0.3.5 is affected by a cross-site scripting (XSS) vulnerability on the SETTINGS page. The issue allows injection of JavaScript through the Site Language, Site Title, Site Description, and Site Keywords fields. Some sources describe the attack as remote and exploitative via the affected...