CVE-2018-10250

Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.8

Description: The issue allows for XSS via the keywords parameter in a weixin category action on the "admincp.php" endpoint. This is related to a WeChat Classified Management keyword search.

Recommendations: For version 7.0.8, avoid using the keywords parameter in the weixin category action on the "admincp.php" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the admincp.php endpoint to minimize the risk of exploitation.