CVE-2018-13865: XSS
Published Jul 10, 2018
·Updated
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.
Affected Software
1 affected component
idreamsoft iCMS=7.0.9
Event History
Jul 10, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue in idreamsoft iCMS 7.0.9?
The vulnerability ID of this issue in idreamsoft iCMS 7.0.9 is CVE-2018-13865.
2
What is the severity rating of CVE-2018-13865?
CVE-2018-13865 has a severity rating of 6.1, which is classified as medium.
3
How does the XSS vulnerability in idreamsoft iCMS 7.0.9 occur?
The XSS vulnerability occurs via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.
4
Which version of idreamsoft iCMS is affected by CVE-2018-13865?
CVE-2018-13865 affects idreamsoft iCMS version 7.0.9.
5
Is there a known fix for CVE-2018-13865 in idreamsoft iCMS 7.0.9?
At the moment, there is no known fix for CVE-2018-13865 in idreamsoft iCMS 7.0.9. It is recommended to stay updated with the vendor's security advisories.