CVE-2018-14969

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...

CVE-2018-14969

QCMS 3.0.1 is affected by CVE-2018-14969. The vulnerability is a cross-site scripting flaw in upload/System/Controller/backend/system.php, described in CNVD-2019-10276 as exploitable by remote attackers to inject arbitrary web script or HTML. No specific exploit details or patch information are p...