← All advisories

Medium severity4.8NVD Advisory· Published Dec 30, 2018· Updated Jun 17, 2026

CVE-2018-20597

CVE-2018-20597

Description

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.

Affected products

2

Ucms/Ucmsinferred2 versions
=1.4.7+ 1 more
- (no CPE)range: =1.4.7
- (no CPE)range: =1.4.7

Patches

Vulnerability mechanics

References

1

github.com/AvaterXXX/CVEs/blob/master/ucms.mdnvdExploitTechnical Description

News mentions

0

No linked articles in our index yet.