CVE-2018-19195

CVE-2018-19195 concerns XiaoCms 20141229 where an XSS vulnerability exists in the template\default\show_product.html. The issue is a client-side/script injection risk in that template, with CVSS2 base score 4.3 (MEDIUM) and CVSS3 base score 6.1 (MEDIUM). The connected documents confirm the affect...