CVE-2018-18209

CVE-2018-18209 affects DiliCMS 2.4.0. A reflected XSS exists via the admin/index.php/setting/site?tab=site_attachment parameter (attachment_type). Underlying issue is input handling that allows HTML/script injection, with potential exposure to sensitive data as described in CNVD-2019-17479 and CN...

DiliCMS Cross-Site Scripting Vulnerability

DiliCMS aka DiligentCMS is a content management system CMS based on Codelgniter. A cross-site scripting vulnerability exists in the System Settings - Site Settings filing number field of the admin/index.php file in DiliCMS version 2.4.0. A remote attacker can exploit this vulnerability to inject...

CVE-2018-10430

An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...

Cross site scripting

An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...

CVE-2018-10430

An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...

CVE-2018-10430

An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...

CVE-2018-10430

DiliCMS 2.4.0 has a Stored XSS vulnerability in the admin/index.php, specifically in the fourth textbox of System setting → site setting. The issue is described across multiple connected sources as a stored XSS; no exploit details are provided in the documents. The root cause and impact are limit...