CVE-2018-1000087

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . This attack appear to be exploitable via Attacker can execute the JavaScript into the "Create New File" and "Create New Directory" input box from 'files'.

Score
CVSS 3.0 4.8 Medium
Status
Modified - cve@mitre.org
Published
2018-03-13
Last modified
2024-08-05
Weaknesses
CWE-79

Affected products

References