medium6.1
CVE-2018-12919
In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.
Impact
In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craftedweb Project | Craftedweb | through 2013-09-24 |