PT-2019-19255 · Wtcms · Wtcms

Assassins-White · Published 2019-02-18 · Updated 2019-02-19 · CVE-2019-8911

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WTCMS version 1.0

Description An issue was discovered that allows stored XSS via the third text box, which is used for the website statistics code.

Recommendations For WTCMS version 1.0, consider disabling the third text box for website statistics code until a patch is available to prevent exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-8911

Affected Products

Wtcms

References · 3

• 🔥 https://github.com/taosir/wtcms/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8911 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8911 · Vendor Advisory