PT-2018-17606

Name of the Vulnerable Software and Affected Versions Composr CMS version 10.0.13 Description The issue concerns a security problem where an attacker can inject malicious code. This is achieved by manipulating the site name parameter in a specific request to the '/adminzone/index.php' API endpoin...

CVE-2018-6518: Improper Neutralization of Input During Web Page Generation

Composr CMS 10.0.13 has XSS via the sitename parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php...