CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

CVE-2018-19193

CVE-2018-19193 affects XiaoCms 20141229. There is a Cross‑Site Scripting (XSS) vulnerability via the largest input box on the New news screen, indicating inadequate input handling in that field. Documented impact per sources notes potential script injection with partial integrity impact; no expli...