CVE-2018-15842

WolfCMS 0.8.3.1 is affected by a Cross-Site Scripting (XSS) vulnerability triggered by the slug parameter in the /?/admin/page/add path. The root cause is inadequate filtering of the slug parameter, allowing injection and execution of JavaScript. Public references (NVD/CNVD/OSV, among others) con...