medium4.8
CVE-2018-16773
EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
Impact
EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easycms | Easycms | Version 1.5 |