CVE-2018-16725

XSS in baijiacms V4 via the id parameter of assets/weengine/components/zclip/ZeroClipboard.swf (Non-standard use of the flash component). Affected: baijiacms V4; root cause: improper handling of the SWF component parameter; impact: cross-site scripting exposure. Remediation details are not provid...

CVE-2018-16725: Improper Neutralization of Input During Web Page Generation

An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component."...