2 matches found
CVE-2018-14969: Improper Neutralization of Input During Web Page Generation
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...
4.8CVSS5.5AI score0.00534EPSS
SaveExploits1References2
PT-2018-12846
Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/system.php file, which has a cross-site scripting XSS issue. Recommendations For QCMS version 3.0.1, update to a newer version that contains a fix f...
4.8CVSS0.00534EPSS
SaveExploits1References2
20