CVE-2018-12266: Improper Neutralization of Input During Web Page Generation

system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code...

PT-2018-11089

Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue concerns a problem where crafted input can trigger a 404 HTTP status code, leading to XSS in the system/errors/404.php file of HongCMS. Recommendations For HongCMS version 3.0.0, update the...