CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-04-30

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Bigtree Cms (Bigtreecms)

References

• https://github.com/bigtreecms/BigTree-CMS#changelog
• https://github.com/bigtreecms/BigTree-CMS/commit/b2eff67e45b90ca26a62e971e8f0d5d0d70f23e6
• https://github.com/bigtreecms/BigTree-CMS/issues/332