Unrated

Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because...

CVE-2018-17361 First seen on SecPulse Sep 24, 2018

Original description The description as published by the source.

Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because $_SERVER['PHP_SELF'] is mishandled.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report github.com

Key facts

Severity: Unrated
Published: Sep 24, 2018
First seen on SecPulse: Sep 24, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49