CVE-2018-1999021

CVE-2018-1999021 affects GleezCMS Gleez Cms 1.3.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Profile page editor that can allow injecting arbitrary web script or HTML. Exploitation requires the victim to visit the attacker’s profile page, with the attacker exercising control o...