PT-2018-14600

CVE-2018-18722

·

Publicado

2018-10-28

·

Atualizado

2018-12-04

Descrição por

CVSS 3.1
4.8
Média
MétricasAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5
Description A cross-site scripting (XSS) issue was found in the "admin/content/editcontent?id=29&gopage=1" endpoint. This issue allows for potential malicious script execution.
Recommendations For YUNUCMS version 1.1.5, update to a newer version that contains a fix for this issue, if available. As a temporary workaround, consider restricting access to the "admin/content/editcontent" endpoint to minimize the risk of exploitation. Avoid using the id and gopage parameters in the affected endpoint until the issue is resolved.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾