Unscored CVE-2019-18219 EUVD-2019-8019GHSA-f4f4-jj3q-x4vj

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components …

Published Oct 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection within both GET or POST requests, via a crafted URL or via the UpgradeMode POST parameter.

References

https://github.com/Jemt/SitemagicCMS/blob/master/changelog.txt
https://vuldb.com/?id.144007