Unrated severityNVD Advisory· Published Nov 17, 2018· Updated Aug 5, 2024
CVE-2018-19350
CVE-2018-19350
Description
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- github.com/Xmansec/seacms_vul/tree/master/XSSmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.