CVE-2018-14972

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1

Description An issue was discovered in the upload/System/Controller/backend/down.php file, which has a Cross-Site Scripting (XSS) issue.

Recommendations For QCMS version 3.0.1, consider restricting access to the vulnerable down.php file until a patch is available. As a temporary workaround, avoid using the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.