4 matches found
Design/Logic Flaw
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...
4.3CVSS5.9AI score0.00675EPSS
SaveExploits1References1Affected Software1
CVE-2018-20476
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...
6.1CVSS6AI score0.00675EPSS
SaveExploits1References1
CVE-2018-20476
Affected software: S-CMS 3.0. The vulnerability is an XSS in admin/demo.php via the T_id parameter, caused by inadequate input filtering of T_id. Impact: remote attackers can inject arbitrary Web script or HTML that executes in the context of a user’s browser. Exploitation: described as XSS via t...
6.1CVSS5.9AI score0.00675EPSS
SaveExploits1References1Affected Software1
20