CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

EUVD-2018-10902

Malware in sbrugna...

XiaoCms Cross-Site Scripting Vulnerability

XiaoCms is a lightweight content management system CMS based on PHP and MySQL and capable of running on Linux, Windows and other platforms. A cross-site scripting vulnerability exists in XiaoCms version 20141229, which can be exploited by remote attackers to inject arbitrary web script or HTML vi...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

PT-2018-14853

Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue was discovered that allows for XSS via the largest input box on the "New news" screen. Recommendations For XiaoCms version 20141229, consider restricting access to the "New news" screen until a fix...

CVE-2018-19193: Improper Neutralization of Input During Web Page Generation

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...