PT-2018-13526

Name of the Vulnerable Software and Affected Versions IdeaCMS versions through 2016-04-30 Description The issue is related to a reflected XSS that can be exploited via the kw parameter in the "index.php?c=content&a=search" endpoint. The product is discontinued. Recommendations For IdeaCMS version...

CVE-2018-16372: Improper Neutralization of Input During Web Page Generation

The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued...