Medium severity5.4NVD Advisory· Published Apr 28, 2018· Updated Jun 17, 2026

CVE-2018-10527

Description

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.html#listarticle URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tearz Y/Easycmsinferred2 versions
= 1.3+ 1 more
- (no CPE)range: = 1.3
- (no CPE)range: = 1.3
Easycms Project/Easycms
cpe:2.3:a:easycms_project:easycms:1.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/teameasy/EasyCMS/issues/2nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000