Design/Logic Flaw

An issue was discovered in OTCMS 3.61. XSS exists in admin/shareswitch.php via these parameters: fieldName fieldName2 tabName...

PT-2018-13886

Name of the Vulnerable Software and Affected Versions OTCMS version 3.61 Description A security issue was found in OTCMS, where a cross-site scripting XSS attack can be executed. This issue is located in the admin/share switch.php file and is triggered by the fieldName, fieldName2, and tabName...

CVE-2018-17086: Improper Neutralization of Input During Web Page Generation

An issue was discovered in OTCMS 3.61. XSS exists in admin/shareswitch.php via these parameters: fieldName fieldName2 tabName...