medium5.4
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
Impact
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Naviwebs | Navigate Cms | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866
- https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms
- https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866
- https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms