CVE-2019-13341

In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie.
References
Link Resource
https://github.com/bg5sbk/MiniCMS/issues/32 Exploit Issue Tracking Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:1234n:minicms:1.10:*:*:*:*:*:*:*

Information

Published : 2019-07-05 08:16

Updated : 2019-07-07 15:20


NVD link : CVE-2019-13341

Mitre link : CVE-2019-13341


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

1234n

  • minicms