CVE-2018-20589

The CVE-2018-20589 entry concerns Ivan Cordoba Generic Content Management System (CMS) up to 2018-04-28, affected by a cross-site scripting (XSS) flaw in Administrator/add_pictures.php that relies on an article ID. Technical detail across connected sources specifies the vulnerability as XSS in th...