Lucene search
+L

5 matches found

OSV
OSV
•added 2019/03/07 11:29 p.m.•20 views

CVE-2018-17426

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

5.4CVSS5.6AI score
SaveExploits0References1
NVD
NVD
•added 2019/03/07 11:29 p.m.•25 views

CVE-2018-17426

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

5.4CVSS5.2AI score0.00684EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/03/07 10:00 p.m.•39 views

CVE-2018-17426

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

5.2AI score0.00684EPSS
SaveExploits1References1
CVE
CVE
•added 2019/03/07 10:00 p.m.•50 views

CVE-2018-17426

WUZHI CMS 4.1.0 is affected by a stored XSS vulnerability in the Extension module, specifically the "SMS in station" field under index.php?m=core. The issue is caused by improper input handling in that field, enabling arbitrary HTML/JS injection. No exploit details or remediation are provided in ...

5.4CVSS5.1AI score0.00684EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/07 12:00 a.m.•6 views

CVE-2018-17426: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

5.4CVSS5.8AI score0.00684EPSS
SaveExploits1References2
Rows per page
Query Builder