2 matches found
CVE-2018-18824: Improper Neutralization of Input During Web Page Generation
WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/filemanager/browse/...
4.8CVSS5.7AI score0.01033EPSS
SaveExploits1References2
CVE-2018-9992: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...
4.8CVSS5.6AI score0.00516EPSS
SaveExploits1References2
20