CVE-2019-14976: XSS
Published Aug 12, 2019
·Updated
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.
Affected Software
1 affected component
icmsdev icms=7.0.15
Event History
Aug 12, 2019
CVE Published
via MITRE·09:05 PM
Data Sourced
via MITRE·09:05 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-14976.
2
What is the severity level of CVE-2019-14976?
The severity level of CVE-2019-14976 is medium.
3
How does CVE-2019-14976 occur?
CVE-2019-14976 occurs through XSS via the keywords parameter in iCMS 7.0.15.
4
What software versions are affected by CVE-2019-14976?
The affected software version of CVE-2019-14976 is iCMS 7.0.15.
5
How can I mitigate CVE-2019-14976?
To mitigate CVE-2019-14976, it is recommended to update iCMS to a version that has a fix for this vulnerability.