Vulnerability Details CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.7%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
- https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866
- https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms
- https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866
- https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms
Products affected by CVE-2018-18029
-
cpe:2.3:a:naviwebs:navigate_cms:-