EUVD-2018-10449

Malware in sbrugna...

Cross site scripting

An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999...

CVE-2018-13999

Catfish CMS v4.7.9 is vulnerable to cross-site scripting via the admin/Index/write.html editorValue parameter (an administrator-posted article). The CVE-2018-13999 entry documents this XSS flaw; related entries note a similar issue in Catfish CMS 4.8.30. The provided documents do not specify a pa...