CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

SansCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...