PT-2019-13175 · 1234N+1 · Minicms

Hachp1O · Published 2019-07-03 · Updated 2019-07-10 · CVE-2019-13186

NVD

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-13186

Affected Products

Minicms

References · 3

• 🔥 https://github.com/bg5sbk/MiniCMS/issues/31 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13186 · Security Note