CVE-2018-18290

An issue was discovered in nc-cms through 2017-03-10

published October 14, 2018

CVSS
—
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html&name=home_content allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Published
2018-10-14T21:00Z
EPSS history
Timeline
  • 14 OCT 21:00Z
    An issue was discovered in nc-cms through 2017-03-10
    cvelistv5