CVE-2018-17113

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173.

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.64% chance of exploitation in the next 30 days, 48th percentile

Published

2018-09-17

Updated

2024-08-05

Proof-of-concept exploits (1)

• teameasy/EasyCMS/issues/7

References

• CVE Record
• NVD entry

Related

• CVE-2018-12971
• CVE-2018-16345
• CVE-2018-16759
• CVE-2019-6294
• CVE-2018-17110
• CVE-2018-17126