CVE-2018-11332

Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote…

published May 24, 2018

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted site name to the manager/processors/save_settings.processor.php file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01810 · 78.5th percentile
Published
2018-05-24T16:00Z
EPSS history
Timeline
  • 24 MAY 16:00Z
    Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote…
    cvelistv5