CVE-2018-17113

MEDIUM 6.1CVE-2018-17113 · Published 17/09/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
easycms easycms	`= 1.5`	No fix yet

Description

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173.

References

teameasy/EasyCMS · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free