← All advisories

Medium severity6.1NVD Advisory· Published Jul 28, 2018· Updated Jun 17, 2026

CVE-2018-14686

CVE-2018-14686

Description

system/edit_book.php in XYCMS 1.7 has stored XSS via a crafted add_do.php request, related to add_book.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Xycms Project/Xycms
cpe:2.3:a:xycms_project:xycms:1.7:*:*:*:*:*:*:*
XYCMS/XYCMSllm-fuzzy
Range: =1.7

Patches

Vulnerability mechanics

References

1

github.com/TonyKentClark/MyCodeAudit/blob/master/xycms%20%20v1.7nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.