CVE-2018-7035

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor…

published April 5, 2018

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode in an Add Blog action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00946 · 60.5th percentile
Published
2018-04-05T14:00Z
EPSS history
Timeline
  • 05 APR 14:00Z
    Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor…
    cvelistv5