PT-2018-16808 · Radiant · Radiant Cms

Published 2018-01-04 · Updated 2018-01-16 · CVE-2018-5216

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Radiant CMS version 1.1.4

Description The issue concerns crafted Markdown input that leads to XSS in the part body content parameter of the "admin/pages/*/edit" resource.

Recommendations For Radiant CMS version 1.1.4, avoid using the part body content parameter in the "admin/pages//edit" resource until a fix is available. As a temporary workaround, consider restricting access to the "admin/pages//edit" resource to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-5216

GHSA-MVW8-V767-QHJM

Affected Products

Radiant Cms

References · 5

• 🔥 https://github.com/imsebao/404team/blob/master/radiantcms.md · Exploit
• https://osv.dev/vulnerability/GHSA-mvw8-v767-qhjm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5216 · Security Note
• https://osv.dev/vulnerability/CVE-2018-5216 · Vendor Advisory
• https://github.com/imsebao/404team · Note