← All advisories

Medium severity4.8NVD Advisory· Published Aug 6, 2018· Updated Jun 17, 2026

CVE-2018-14970

CVE-2018-14970

Description

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS.

Affected products

2

Q CMS/Qcmsllm-fuzzy2 versions
3.0.1+ 1 more
- (no CPE)range: 3.0.1
- cpe:2.3:a:q-cms:qcms:3.0.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

github.com/AvaterXXX/QCMS/blob/master/README.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.