PT-2018-13722 · Easycms · Easycms

Sqlsec · Published 2018-09-09 · Updated 2018-11-07 · CVE-2018-16759

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.4

Description The issue concerns the removeXSS function in EasyCMS, which is vulnerable to XSS attacks via an onhashchange event. This is due to the function's inadequate handling of certain events, allowing malicious scripts to be executed.

Recommendations For EasyCMS version 1.4, consider modifying the removeXSS function in App/Common/common.php to properly handle onhashchange events and prevent XSS attacks. As a temporary workaround, consider disabling the removeXSS function until a patch is available. Restrict access to the SearchAction.class.php module to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-16759

Affected Products

Easycms

References · 3

• 🔥 https://github.com/teameasy/EasyCMS/issues/4 · Exploit
• https://osv.dev/vulnerability/CVE-2018-16759 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16759 · Security Note