CVE-2018-14415: XSS
Published Jul 19, 2018
·Updated
An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen.
Affected Software
1 affected component
icmsdev icms<7.0.10
Event History
Jul 19, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-14415?
CVE-2018-14415 is a vulnerability discovered in idreamsoft iCMS before 7.0.10 that allows for XSS attacks via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen.
2
How does CVE-2018-14415 affect idreamsoft iCMS?
CVE-2018-14415 affects idreamsoft iCMS versions up to 7.0.10.
3
What is the severity of CVE-2018-14415?
CVE-2018-14415 has a severity keyword of 'medium' and a CVSSv3 base score of 6.1.
4
How can I fix CVE-2018-14415?
To fix CVE-2018-14415, apply the latest patch or update to idreamsoft iCMS version 7.0.10 or higher.
5
Is there any additional information about CVE-2018-14415?
For more information, you can refer to the GitHub issue: https://github.com/idreamsoft/iCMS/issues/28