PT-2018-17944
CVE-2018-7198
·
Published
2018-02-18
·
Updated
2022-05-13
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
October CMS versions through 1.0.431
The RainLab Blog Plugin used in October CMS versions through 1.0.431
Description
The issue allows for XSS by entering HTML on the Add Posts page. This can be exploited through the RainLab Blog Plugin.
Recommendations
For October CMS versions through 1.0.431, update to a version that includes a fix for this issue.
For The RainLab Blog Plugin used in October CMS versions through 1.0.431, consider disabling the plugin until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾