Clippercms · Clippercms · CVE-2018-11572
**Name of the Vulnerable Software and Affected Versions**
ClipperCMS version 1.3.3
**Description**
The issue concerns an XSS vulnerability in the "Module name" field, specifically when performing a "Modules -> Manage modules -> edit" action, which is accessible via the manager/ URI.
**Recommendations**
For ClipperCMS version 1.3.3, avoid using the "Module name" field in the "Modules -> Manage modules -> edit" action until a fix is available. As a temporary workaround, consider restricting access to the manager/ URI to minimize the risk of exploitation.