← All advisories

Medium severity4.8NVD Advisory· Published Dec 10, 2018· Updated Jun 17, 2026

CVE-2018-20012

CVE-2018-20012

Description

PHPCMF 4.1.3 has XSS via the first input field to the index.php?s=member&c=register&m=index URI.

Affected products

2

Phpcmf/Phpcmfinferred2 versions
= 4.1.3+ 1 more
- (no CPE)range: = 4.1.3
- (no CPE)range: =4.1.3

Patches

Vulnerability mechanics

References

2

gitee.com/copy_cat/phpcmf/blob/master/README.mdnvdExploitVendor Advisory
www.phpcmf.net/version-13.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.