CVE-2018-18733

CVE-2018-18733 concerns an XSS in Catfish CMS 4.8.30 via the admin/Index/write.html flow (related to “write source code”). Connected sources confirm a similar XSS path in Catfish CMS v4.7.9 using the editorValue parameter of admin/Index/write.html, suggesting a common write.html XSS vector across...