PT-2018-17944
CVE-2018-7198
·
تاريخ النشر
2018-02-18
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
October CMS versions through 1.0.431
The RainLab Blog Plugin used in October CMS versions through 1.0.431
Description
The issue allows for XSS by entering HTML on the Add Posts page. This can be exploited through the RainLab Blog Plugin.
Recommendations
For October CMS versions through 1.0.431, update to a version that includes a fix for this issue.
For The RainLab Blog Plugin used in October CMS versions through 1.0.431, consider disabling the plugin until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾