VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Sep 3, 2018· Updated Jun 17, 2026

CVE-2018-16372

CVE-2018-16372

Description

The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued.

Affected products

3
  • Iechoo/Ideacmsreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <= 2016-04-30
  • Ideacms/Ideacms
    cpe:2.3:a:ideacms:ideacms:*:*:*:*:*:*:*:*
    Range: <=2016-04-30

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.