Lucene search
+L

2 matches found

OSV
OSV
added 2018/11/04 5:29 a.m.6 views

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

4.8CVSS5.8AI score0.0064EPSS
SaveExploits1References1
NVD
NVD
added 2018/11/04 5:29 a.m.23 views

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

4.8CVSS4.9AI score0.0064EPSS
SaveExploits1References1
Rows per page
Query Builder