Unscored CVE-2018-6313 EUVD-2018-18074GHSA-p7gf-9c98-hgcr

Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modi…

Published Jan 25, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118.

References

https://github.com/imsebao/404team/blob/master/wbce_cms_xss.md