CVE-2018-16624

Kirby CMS – Kirby v2.5.12 is affected. The vulnerability is in panel/pages/home/edit where an XSS flaw can be triggered by the title of a newly created page. The available connected documents confirm the component/file (panel/pages/home/edit) and the impact (XSS). No explicit root cause or exploi...