Medium · 5.4 CVE-2018-7261 EUVD-2018-0275GHSA-gp82-xr77-88f4

radiant vulnerable to Cross-site Scripting

Published Feb 21, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).

Affected packages

Ecosystem	Package	Affected	Fixed	Record
RubyGems	radiant	1.1.4	—	GHSA-gp82-xr77-88f4

References

103080 vdb-entry
20180220 Multiple Persistent XSS vulnerabilities in Radiant Content Management System mailing-list