VYPR
Medium severity6.1NVD Advisory· Published Nov 7, 2018· Updated Jun 17, 2026

CVE-2018-19083

CVE-2018-19083

Description

WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialchars_decode function via the /?/publish/ajax/publish_question/ question_content parameter.

Affected products

3
  • Wecenter/Wecenterinferred3 versions
    >=3.2.0,<=3.2.2+ 2 more
    • (no CPE)range: >=3.2.0,<=3.2.2
    • cpe:2.3:a:wecenter:wecenter:*:*:*:*:*:*:*:*range: >=3.2.0,<=3.2.2
    • (no CPE)range: 3.2.0-3.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.