← All advisories

Medium severity6.5OSV Advisory· Published Dec 10, 2018· Updated Jun 17, 2026

CVE-2018-16636

CVE-2018-16636

Description

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Nucleus CMS/Nucleus CMSOSV2 versions
Nucleus-3-3-RC@1169, Nucleus-3-4-RC@1309, Nucleus-3-40@1326, …+ 1 more
- (no CPE)range: Nucleus-3-3-RC@1169, Nucleus-3-4-RC@1309, Nucleus-3-40@1326, …
- (no CPE)range: = 3.70

Patches

Vulnerability mechanics

References

2

github.com/NucleusCMS/NucleusCMS/issues/84nvdExploitIssue TrackingThird Party Advisory
github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.