CVE-2019-8410

Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...

PT-2019-19017

Name of the Vulnerable Software and Affected Versions Maccms version 8.0 Description The issue allows for XSS via the t key parameter in the inc/config/cache.php file. This is because the template/paody/html/vod type.html file mishandles the keywords parameter, and the a/tpl/module/db.php file on...

CVE-2019-8410: Improper Neutralization of Input During Web Page Generation

Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...