medium6.1
CVE-2018-13865
An issue was discovered in idreamsoft iCMS 7.0.9.
Impact
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idreamsoft | Icms | Version 7.0.9 |