Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen.
References
Link | Resource |
---|---|
https://gist.github.com/priyanksethi/48cce2fc4257213c8aca91e3c82a4ad3 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-04-10 23:29
Updated : 2018-05-11 06:11
NVD link : CVE-2018-9992
Mitre link : CVE-2018-9992
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
frog_cms_project
- frog_cms