CVE-2018-10806

An issue was discovered in Frog CMS 0.9.5

published May 8, 2018

CVSS
—
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00327 · 24.5th percentile
Published
2018-05-08T07:00Z
EPSS history
Timeline
  • 08 MAY 07:00Z
    An issue was discovered in Frog CMS 0.9.5
    cvelistv5