medium6.1Public exploit code
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injectio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MiniCMS 1.1 - Cross Site Scripting (XSS)2025-04-11 · webapps · php
Impact
MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 1234n | Minicms | Version 1.1 |