PT-2018-13703 · Razorcms · Razorcms

Published 2018-09-12 · Updated 2018-11-02 · CVE-2018-16726

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions razorCMS version 3.4.7

Description The issue allows HTML injection via the description of the homepage within the settings component.

Recommendations For razorCMS version 3.4.7, update to a version that fixes this issue, as using the current version may pose a risk due to the HTML injection vulnerability in the settings component.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-16726

Affected Products

Razorcms

References · 3

• 🔥❌ https://github.com/smiffy6969/razorCMS/issues/52 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2018-16726 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16726 · Security Note