← All advisories

Medium severity4.8OSV Advisory· Published Apr 25, 2019· Updated Jun 17, 2026

CVE-2018-18824

CVE-2018-18824

Description

WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wolfcms/WolfCMSOSV3 versions
0.7.0, 0.7.1, 0.7.2, …+ 2 more
- (no CPE)range: 0.7.0, 0.7.1, 0.7.2, …
- cpe:2.3:a:wolfcms:wolf_cms:0.8.3.1:*:*:*:*:*:*:*
- (no CPE)range: = 0.8.3.1

Patches

Vulnerability mechanics

References

3

github.com/s-kustm/Subodh/blob/master/CVE-2018-18824.pdfnvdExploitThird Party Advisory
twitter.com/Subodhk62060242nvdThird Party Advisory
www.linkedin.com/in/subodh-kumar-8a00b1125/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.