CVE-2018-5216

Radiant CMS 1.1.4 is affected by an XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource. The root cause is insufficient escaping of input, enabling script execution in the affected admin/view contexts. No remediation details are provided in the supp...

CVE-2018-7261

CVE-2018-7261 affects Radiant CMS 1.1.4 with multiple Persistent XSS vulnerabilities in Personal Preferences (Name/Username) and Configuration (Site Title, Dev Site Domain, Page Parts, Page Fields). Root cause: insufficient filtration/sanitization of user-supplied data. Impact: remote attacker ma...