Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/system_config.html, related to template/paody/html/vod_index.html.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-06-07T16:40:51

Updated: 2024-08-05T11:37:11.357Z

Reserved: 2018-11-22T00:00:00

Link: CVE-2018-19465

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2019-06-07T17:29:00.600

Modified: 2019-06-10T18:14:46.957

Link: CVE-2018-19465

cve-icon Redhat

No data.