Radiant CMS part_body_content parameter cross-site scripting vulnerability

Radiant CMS is a free and open source content management system designed for small teams. A cross-site scripting vulnerability exists in Radiant CMS version 1.1.4. A remote attack can be exploited to inject arbitrary web script or HTML by sending the 'partbodycontent' parameter with specially...

CVE-2018-5216: Improper Neutralization of Input During Web Page Generation

Radiant CMS 1.1.4 has XSS via crafted Markdown input in the partbodycontent parameter to an admin/pages//edit resource...