CVE-2018-13865

An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-07-10

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Icms (Idreamsoft)

References

• https://github.com/idreamsoft/iCMS/issues/27