← All advisories

Medium severity5.4NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026

CVE-2018-9925

CVE-2018-9925

Description

An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an admincp.php?app=user&do=save&frame=iPHP request.

Affected products

2

Idreamsoft/Icmsinferred2 versions
<=7.0.7+ 1 more
- (no CPE)range: <=7.0.7
- (no CPE)range: <=7.0.7

Patches

Vulnerability mechanics

References

1

github.com/idreamsoft/iCMS/issues/18nvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.