CVE-2019-8440

An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site setting" of admin/index.php, aka site_logo.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2019-03-07

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Dilicms (Dilicms)

References

• https://github.com/chekun/DiliCMS/issues/63