CVE-2018-6313

Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2018-01-25

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Wbce Cms (Wbce)

References

• https://github.com/imsebao/404team/blob/master/wbce_cms_xss.md