CVE-2018-17113

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...

CVE-2018-17113

CVE-2018-17113 : The vulnerability concerns EasyCMS 1.5 in App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf, where XSS can be triggered via the uploadifyID or movieName parameter. This is tied to CVE-2018-9173. Connected sources corroborate an XSS issue affecting the uploa...