CVE-2018-25086

The CVE-2018-25086 issue affects sea75300 FanPress CM versions up to 3.6.3, specifically the Template Preview component and its getArticlesPreview function in inc/controller/action/system/templatepreview.php, which allows cross-site scripting. The vulnerability can be triggered remotely and is ad...