In short
- CVE-2018-10422 is a MEDIUM (CVSS 4.8) vulnerability affecting hongcms (hongcms project).
- Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 43.9% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| hongcms | = 3.0.0
| No fix yet |
Description
An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free