CVE-2018-10250: XSS
Published Apr 20, 2018
·Updated
iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixincategory action, aka a WeChat Classified Management keyword search.
Affected Software
1 affected component
icmsdev icms=7.0.8
Event History
Apr 20, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-10250?
CVE-2018-10250 is a vulnerability in iCMS V7.0.8 that allows for XSS attacks via the admincp.php keywords parameter in a weixin_category action.
2
How severe is CVE-2018-10250?
CVE-2018-10250 has a severity rating of 5.4, which is considered medium.
3
How can the XSS vulnerability in iCMS V7.0.8 be exploited?
The XSS vulnerability in iCMS V7.0.8 can be exploited by injecting malicious code through the admincp.php keywords parameter in a weixin_category action.
4
Is there a fix available for CVE-2018-10250?
Yes, upgrading to iCMS V7.0.9 or later versions will fix CVE-2018-10250.
5
Where can I find more information about CVE-2018-10250?
More information about CVE-2018-10250 can be found at the following reference: https://github.com/idreamsoft/iCMS/issues/22