CVE-2018-5375

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4

Description The issue is related to a XSS problem. It occurs via the appid parameter in a delete action in the includespacecpspacecp space.php file.

Recommendations For DiscuzX version X3.4, avoid using the appid parameter in the delete action of the includespacecpspacecp space.php file until a fix is available. As a temporary workaround, consider restricting access to the delete action in the includespacecpspacecp space.php file to minimize the risk of exploitation.