CVE-2018-0538

The CVE-2018-0538 entry concerns QQQ SYSTEMS ver2.24, a CGI-based quiz-system that contains a stored cross-site scripting vulnerability (CWE-79). Affected component is the web UI handling administrative/arbitrary input that can be crafted to execute arbitrary scripts in the victim’s browser, enab...