medium4.8
CVE-2018-13999
Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).
Impact
Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Catfish-Cms | Catfish Cms | Version 4.7.9 |