Catfish CMS Cross-Site Scripting Vulnerability (CNVD-2018-13273)

Catfish CMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in Catfish CMS version 4.7.9. A remote attacker can inject arbitrary web script or HTML by sending the 'editorValue' parameter to the admin/Index/write.html page...

CVE-2018-13999

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

CVE-2018-13999

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

CVE-2018-13999

Catfish CMS v4.7.9 is vulnerable to cross-site scripting via the admin/Index/write.html editorValue parameter (an administrator-posted article). The CVE-2018-13999 entry documents this XSS flaw; related entries note a similar issue in Catfish CMS 4.8.30. The provided documents do not specify a pa...