CVE-2018-16725

XSS in baijiacms V4 via the id parameter of assets/weengine/components/zclip/ZeroClipboard.swf (Non-standard use of the flash component). Affected: baijiacms V4; root cause: improper handling of the SWF component parameter; impact: cross-site scripting exposure. Remediation details are not provid...