CVE-2018-17320

An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadminaaddpost action...

PT-2018-13981

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description An issue was discovered in the software, where the minfo parameter in the sadmin/aindex.php endpoint is vulnerable to stored XSS in the sadmin aaddpost action. Recommendations For UCMS version 1.4.6, avoid using...