CVE-2018-19849: XSS
Published Dec 4, 2018
·Updated
An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter.
Affected Software
1 affected component
YzmCMS YzmCMS=5.2
Event History
Dec 4, 2018
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-19849?
CVE-2018-19849 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2018-19849?
To fix CVE-2018-19849, ensure that you validate and sanitize user input in the searinfo parameter within the admin/content/search.html.
3
What impact does CVE-2018-19849 have on web applications?
CVE-2018-19849 can allow attackers to execute arbitrary JavaScript code in the context of the web application, leading to possible data theft or session hijacking.
4
Which versions of YzmCMS are affected by CVE-2018-19849?
CVE-2018-19849 specifically affects YzmCMS version 5.2.
5
Is CVE-2018-19849 a local or remote vulnerability?
CVE-2018-19849 is a remote vulnerability, as it can be exploited by sending crafted requests to the affected application.