Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Lzlzh2016

#44039of 53,633
6.1Total CVSS
Vulnerabilities · 1
PT-2018-11089
6.1
2018-06-13
Hongcms · Hongcms · CVE-2018-12266
**Name of the Vulnerable Software and Affected Versions** HongCMS version 3.0.0 **Description** The issue concerns a problem where crafted input can trigger a 404 HTTP status code, leading to XSS in the system/errors/404.php file of HongCMS. **Recommendations** For HongCMS version 3.0.0, update the system/errors/404.php file to properly handle and sanitize user input to prevent XSS attacks. As a temporary workaround, consider implementing input validation and sanitization for all user input to minimize the risk of exploitation.