CVE-2018-15847

Name of the Vulnerable Software and Affected Versions puppyCMS version 5.1

Description An issue was discovered in the software, where there is a potential for XSS via the menu.php file in the "Add Page/URL" URL link field.

Recommendations For puppyCMS version 5.1, consider restricting access to the menu.php file or the "Add Page/URL" feature until a fix is available. As a temporary workaround, avoid using the "Add Page/URL" URL link field in menu.php to minimize the risk of exploitation.