CVE-2018-16786

DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php

published September 21, 2018

CVSS
—
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00675 · 51.3th percentile
Published
2018-09-21T15:00Z
EPSS history
Timeline
  • 21 SEP 15:00Z
    DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php
    cvelistv5