EUVD-2018-11575

Malware in sbrugna...

CVE-2018-19901

CVE-2018-19901 affects No-CMS 1.1.3 and is described as a persistent XSS vulnerability exploitable via the blog/manage_article/index/“article_title” parameter. The available public records identify the vulnerable component/entry point but do not provide exploit code, affected versions beyond 1.1....

CVE-2018-19901: Improper Neutralization of Input During Web Page Generation

No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...