Description
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.
Unscored
CVE-2018-13865
EUVD-2018-5799GHSA-r5r8-mvx6-hrjv
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing th…
Published Jul 10, 2018 · Updated Sep 17, 2024 · Assigned by mitre