CVE-2019-11426: XSS
Published Apr 21, 2019
·Updated
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.
Affected Software
1 affected component
idreamsoft iCMS=7.0.14
Event History
Apr 21, 2019
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this XSS issue?
The vulnerability ID for this XSS issue is CVE-2019-11426.
2
What is the severity level of CVE-2019-11426?
The severity level of CVE-2019-11426 is medium (6.1).
3
How does this XSS issue occur?
This XSS issue occurs in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.
4
Is there a fix available for CVE-2019-11426?
Yes, a fix is available for CVE-2019-11426. It is recommended to update to a patched version of idreamsoft iCMS.
5
Where can I find more information about CVE-2019-11426?
More information about CVE-2019-11426 can be found at the following link: https://github.com/idreamsoft/iCMS/issues/64