CVE-2023-5015

A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file ajax.php?do=strarraylist. The manipulation of the argument strdefault leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

UCMS Cross-Site Scripting Vulnerability

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in UCMS version 1.4.7, which originates from an unknown function in the file ajax.php?do=strarraylist, which leads to cross-site scripting via the parameter strdefault...