CVE-2018-9992

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/file_manager/browse/ screen.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:frog_cms_project:frog_cms:0.9.5:*:*:*:*:*:*:*

Information

Published : 2018-04-10 23:29

Updated : 2018-05-11 06:11


NVD link : CVE-2018-9992

Mitre link : CVE-2018-9992


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

frog_cms_project

  • frog_cms