CVE-2018-10023: Improper Neutralization of Input During Web Page Generation

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

PT-2018-9629

Name of the Vulnerable Software and Affected Versions: Catfish CMS version 4.7.21 Description: The issue allows for XSS via the pinglun parameter to the "cat/index/index/pinglun" API endpoint, which is related to an authenticated comment. Recommendations: For Catfish CMS version 4.7.21, avoid usi...