CVE-2018-17085

Name of the Vulnerable Software and Affected Versions OTCMS version 3.61

Description A security issue was found in OTCMS, where a cross-site scripting (XSS) attack can be executed. This issue is located in the admin/users.php file and is triggered by the dataTypeCN, dataMode, and dataModeStr parameters.

Recommendations For OTCMS version 3.61, as a temporary workaround, consider restricting access to the admin/users.php file until a patch is available. Avoid using the dataTypeCN, dataMode, and dataModeStr parameters in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.