CVE-2018-19083

WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialchars_decode function via the /?/publish/ajax/publish_question/ question_content parameter.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-11-07

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Wecenter (Wecenter)

References

• http://www.iwantacve.cn/index.php/archives/76/