CVE-2019-8410

Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and…

published February 27, 2019

CVSS
—
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00865 · 58.2th percentile
Published
2019-02-27T17:00Z
EPSS history
Timeline
  • 27 FEB 17:00Z
    Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and…
    cvelistv5