Archive
1 June 2018
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 4.8CVE-2018-11564 Public exploit
Pagekit Stored Cross-site Scripting
Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will …