CVE-2018-13999

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

CVE-2018-13999: Improper Neutralization of Input During Web Page Generation

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

PT-2018-12266

Name of the Vulnerable Software and Affected Versions Catfish CMS version 4.7.9 Description The issue allows for XSS via the editorValue parameter in the "admin/Index/write.html" endpoint. This occurs when an article is posted by an administrator. Recommendations For Catfish CMS version 4.7.9,...