NetSight
medium6.1

CVE-2018-20778

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.

Impact

admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.

Affected products

VendorProductAffected versions
Frog Cms ProjectFrog Cms
Version 0.9.5

Weakness classification

References