CVE-2018-14513: XSS
Published Jul 23, 2018
·Updated
An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[content] parameter to the index.php?m=feedback&f=index&v=contact URI.
Affected Software
1 affected component
Wuzhi Cms Project Wuzhi Cms=4.1.0
Event History
Jul 23, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14513?
CVE-2018-14513 is classified as a medium severity vulnerability due to its XSS impact.
2
How do I fix CVE-2018-14513?
To fix CVE-2018-14513, users should update to a patched version of WUZHI CMS that addresses this XSS vulnerability.
3
What type of attack can be executed due to CVE-2018-14513?
CVE-2018-14513 allows remote attackers to execute persistent cross-site scripting attacks by injecting malicious scripts.
4
Which version of WUZHI CMS is affected by CVE-2018-14513?
CVE-2018-14513 specifically affects WUZHI CMS version 4.1.0.
5
Where is the vulnerable parameter in CVE-2018-14513?
The vulnerable parameter in CVE-2018-14513 is 'form[content]' used in the index.php?m=feedback&f=index&v=contact URI.