← All advisories

Medium severity4.8NVD Advisory· Published Dec 10, 2018· Updated Jun 17, 2026

CVE-2018-20012

CVE-2018-20012

Description

PHPCMF 4.1.3 has XSS via the first input field to the index.php?s=member&c=register&m=index URI.

Affected products

3

Phpcmf/Phpcmfllm-fuzzy3 versions
=4.1.3+ 2 more
- (no CPE)range: =4.1.3
- (no CPE)range: = 4.1.3
- cpe:2.3:a:phpcmf:phpcmf:4.1.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

gitee.com/copy_cat/phpcmf/blob/master/README.mdnvdExploitVendor Advisory
www.phpcmf.net/version-13.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.