CVE-2018-18082

Name of the Vulnerable Software and Affected Versions Waimai Super Cms version 20150505

Description A security issue exists due to the presence of a cross-site scripting (XSS) flaw. This issue can be exploited via the fname parameter in the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave API endpoints.

Recommendations For Waimai Super Cms version 20150505, avoid using the fname parameter in the affected API endpoints until the issue is resolved. As a temporary workaround, consider restricting access to the admin.php?m=Food&a=addsave and admin.php?m=Food&a=editsave endpoints to minimize the risk of exploitation.