← All advisories

Medium severity4.8OSV Advisory· Published Dec 31, 2018· Updated Jun 17, 2026

CVE-2018-19902

CVE-2018-19902

Description

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.

Affected products

2

Gofrendiasgard/No CMSOSV
Range: v0.6.6-alpha, v1.1.3, v_0.5.0_stable, …
No CMS Project/No CMS
cpe:2.3:a:no-cms_project:no-cms:1.1.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

github.com/security-breachlock/CVE-2018-19902/blob/master/XSS.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.