2 matches found
CVE-2018-16727
razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...
5.4CVSS5.3AI score0.0058EPSS
SaveExploits1References1
CVE-2018-16727
razorCMS 3.4.7 is affected by a Stored XSS in the Settings component via the homepage keywords parameter. The CNVD entry additionally notes that a remote attacker can execute arbitrary code in a user’s browser through this vector. No patch/version details or mitigations are provided in the connec...
5.4CVSS5.2AI score0.0058EPSS
SaveExploits1References1Affected Software1
20