PT-2018-13703 · Razorcms · Razorcms

Publicado 2018-09-12 · Atualizado 2018-11-02 · CVE-2018-16726

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions razorCMS version 3.4.7

Description The issue allows HTML injection via the description of the homepage within the settings component.

Recommendations For razorCMS version 3.4.7, update to a version that fixes this issue, as using the current version may pose a risk due to the HTML injection vulnerability in the settings component.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-16726

Produtos afetados

Razorcms

Referências · 3

• 🔥❌ https://github.com/smiffy6969/razorCMS/issues/52 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2018-16726 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-16726 · Nota de Segurança