First published: Sun Apr 21 2019(Updated: )
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
iCMS | =7.0.14 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this XSS issue is CVE-2019-11426.
The severity level of CVE-2019-11426 is medium (6.1).
This XSS issue occurs in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.
Yes, a fix is available for CVE-2019-11426. It is recommended to update to a patched version of idreamsoft iCMS.
More information about CVE-2019-11426 can be found at the following link: https://github.com/idreamsoft/iCMS/issues/64