CVE-2018-12905

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0

Description The issue is related to an XSS in the admin player.php file, specifically with the "system manage" and "add" actions in the manager/index.php file.

Recommendations For joyplus-cms version 1.6.0, consider restricting access to the admin player.php file and the "system manage" and "add" actions in the manager/index.php file until a fix is available. As a temporary workaround, avoid using the affected actions in the manager/index.php file to minimize the risk of exploitation.