Description
Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | radiant | <= 1.1.4 | — | GHSA-mvw8-v767-qhjm |
Medium · 5.4
CVE-2018-5216
EUVD-2018-0163GHSA-mvw8-v767-qhjm
Radiant CMS vulnerable to Cross-site Scripting
Published Jan 4, 2018 · Updated Sep 17, 2024 · Assigned by mitre