2 matches found
CVE-2018-19195
An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\showproduct.html file...
6.1CVSS6AI score0.00675EPSS
SaveExploits1References1
Directory traversal
An issue was discovered in XiaoCms 20141229. admin\controller\database.php allows arbitrary directory deletion via admin/index.php?c=database&a=import&paths=../ directory traversal...
5.5CVSS5.3AI score0.01359EPSS
SaveExploits1References2Affected Software1
20