NetSight
medium5.4

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.

Impact

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.

Affected products

VendorProductAffected versions
RazorcmsRazorcms
Version 3.4.7

Weakness classification

References