CVE-2019-14976

CVE-2019-14976 affects iCMS 7.0.15, exposing a cross-site scripting (XSS) vulnerability in the admin panel. The issue arises via the keywords parameter in admincp.php?app=apps, enabling potentially injection of malicious client-side script. Multiple connected sources (NVD/NIST entries and Red Hat...

CVE-2018-14415

CVE-2018-14415 affects idreamsoft iCMS prior to 7.0.10. A cross-site scripting (XSS) vulnerability exists leveraging the fourth and fifth input elements on the page admincp.php?app=prop&do=add. The issue is confirmed by the primary description and corroborated by CNVD/NVD references; CVSS metrics...