CVE-2018-1000084

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege…

published March 13, 2018

CVSS
—
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege user can steal the cookie of admin user and compromise the admin account. This attack appear to be exploitable via Need to enter the Javascript code into Layout Name .

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.2th percentile
Published
2018-03-13T15:00Z
EPSS history
Timeline
  • 13 MAR 15:00Z
    WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege…
    cvelistv5