CVE-2018-9925: XSS
Published Apr 10, 2018
·Updated
An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an admincp.php?app=user&do=save&frame=iPHP request.
Affected Software
1 affected component
icmsdev icms<=7.0.7
Remediation
Patch Available
Event History
Apr 10, 2018
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Data Sourced
via NVD·06:29 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9925?
The severity of CVE-2018-9925 is medium with a CVSS score of 5.4.
2
How does CVE-2018-9925 impact idreamsoft iCMS?
CVE-2018-9925 allows for XSS attacks via the nickname field in a specific request.
3
How can I fix CVE-2018-9925 in my idreamsoft iCMS installation?
To fix CVE-2018-9925, update idreamsoft iCMS to version 7.0.8 or later.
4
Is there any known workaround for CVE-2018-9925?
No, there is no known workaround for CVE-2018-9925 other than updating to the fixed version.
5
Where can I find more information about CVE-2018-9925?
You can find more information about CVE-2018-9925 at the following reference: [link](https://github.com/idreamsoft/iCMS/issues/18).