← All advisories

Medium severity4.8NVD Advisory· Published Mar 25, 2019· Updated Jun 17, 2026

CVE-2019-10027

CVE-2019-10027

Description

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Phpcms/Phpcmsinferred3 versions
>=9.6,<=9.6.3+ 2 more
- (no CPE)range: >=9.6,<=9.6.3
- cpe:2.3:a:phpcms:phpcms:*:*:*:*:*:*:*:*range: >=9.6.0,<=9.6.3
- (no CPE)range: 9.6.x through 9.6.3

Patches

Vulnerability mechanics

References

2

github.com/sharemice/phpcms_xss/blob/master/index.htmlnvdExploitThird Party Advisory
sharemice.github.io/phpcms_xss/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.