Description
Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).
Unscored
CVE-2019-8410
EUVD-2019-17800GHSA-8wqp-p9pv-hgwm
Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parame…
Published Feb 27, 2019 · Updated Aug 4, 2024 · Assigned by mitre