In short
- CVE-2018-7261 is a MEDIUM (CVSS 5.4) vulnerability affecting radiant, radiant cms (radiantcms).
- Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.8% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| radiant RubyGems | = 1.1.4
| No fix yet |
| radiant cms | = 1.1.4
| No fix yet |
Description
There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).
NVD description
There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free