medium6.1
CVE-2018-18210
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.
Impact
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dilicms | Dilicms | Version 2.4.0 |