CVE-2017-11611: Improper Neutralization of Input During Web Page Generation

Wolf CMS 0.8.3.1 allows Cross-Site Scripting XSS attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/filemanager/" script aka an...

PT-2017-12134

Name of the Vulnerable Software and Affected Versions Wolf CMS version 0.8.3.1 Description The issue arises due to insufficient sanitization of the file name in a "create-file-popup" action and the directory name in a "create-directory-popup" action. This occurs in the HTTP POST method to the...