CVE-2018-11512

MEDIUM 4.8CVE-2018-11512 · Published 28/05/2018 · updated 17/06/2026

In short

CVE-2018-11512 is a MEDIUM (CVSS 4.8) vulnerability affecting witycms (creatiwity).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
witycms creatiwity	`= 0.6.1`	No fix yet

Description

Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to admin/settings/general.

References

Creatiwity/wityCMS commit 7967e5b · Patch
Creatiwity/wityCMS · Exploit
exploit-db.com/exploits/44790 · Exploit

More vulnerabilities in witycms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

witycms

creatiwity

= 0.6.1

No fix yet

Description

More vulnerabilities in witycms

See all →