medium6.1
CVE-2018-18209
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.
Impact
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dilicms | Dilicms | Version 2.4.0 |