← All advisories

Medium severity6.1NVD Advisory· Published Sep 7, 2018· Updated Jun 17, 2026

CVE-2018-16655

CVE-2018-16655

Description

Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php.

Affected products

3

Gxlcms/Gxlcmsinferred3 versions
= 1.0.0+ 2 more
- (no CPE)range: = 1.0.0
- cpe:2.3:a:gxlcms:gxlcms:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0

Patches

Vulnerability mechanics

References

2

github.com/lengjibo/lengjibo.github.io/blob/master/gxlcms/index.htmlnvdExploitThird Party Advisory
lengjibo.github.io/gxlcms/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.