PT-2019-10221
CVE-2018-20778
·
Published
2019-02-11
·
Updated
2019-02-11
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Frog CMS version 0.9.5
Description:
The issue allows for XSS by creating a new file containing a crafted attribute of an IMG element, specifically targeting the "admin/?/plugin/file manager" endpoint.
Recommendations:
For Frog CMS version 0.9.5, consider disabling the file manager plugin until a patch is available to prevent potential XSS exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾