CVE-2018-20600

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmincedit action...

UCMS cross-site scripting vulnerability (CNVD-2019-01087)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the sadmin\cedit.php file in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...