CVE-2018-14517: XSS
Published Jul 23, 2018
·Updated
SeaCMS 6.61 has two XSS issues in the adminconfig.php file via certain form fields.
Affected Software
1 affected component
SEACMS SEACMS=6.61
Event History
Jul 23, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is CVE-2018-14517?
CVE-2018-14517 is a vulnerability found in SeaCMS 6.61 that allows for cross-site scripting (XSS) attacks via certain form fields in the admin_config.php file.
2
How severe is CVE-2018-14517?
CVE-2018-14517 has a severity rating of medium, with a CVSS score of 6.1.
3
How does CVE-2018-14517 affect SeaCMS 6.61?
CVE-2018-14517 affects SeaCMS 6.61 by allowing attackers to execute arbitrary script code in users' browsers.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-14517?
The CWE ID for CVE-2018-14517 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
5
How can I fix CVE-2018-14517?
To fix CVE-2018-14517, it is recommended to apply the latest patches or upgrades provided by SeaCMS to address the XSS issues in the admin_config.php file.