CVE-2018-14977

CVE-2018-14977 affects QCMS 3.0.1. The vulnerability is a cross-site scripting (XSS) flaw in upload/System/Controller/guest.php, exploitable via the name parameter, as described in the CVE entry and corroborated by related CNVD/RedHat references. The issue is distinct from CVE-2018-8070 (XSS via ...