← All advisories

Medium severity6.5OSV Advisory· Published Dec 10, 2018· Updated Jun 17, 2026

CVE-2018-16636

CVE-2018-16636

Description

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Nucleus CMS/Nucleus CMSOSV3 versions
Nucleus-3-3-RC@1169, Nucleus-3-4-RC@1309, Nucleus-3-40@1326, …+ 2 more
- (no CPE)range: Nucleus-3-3-RC@1169, Nucleus-3-4-RC@1309, Nucleus-3-40@1326, …
- cpe:2.3:a:nucleuscms:nucleus_cms:3.70:*:*:*:*:*:*:*
- (no CPE)range: =3.70

Patches

Vulnerability mechanics

References

2

github.com/NucleusCMS/NucleusCMS/issues/84nvdExploitIssue TrackingThird Party Advisory
github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.