ZeroHour

CVE-2018-1000087

PoC ×2
CVSS 3.0
4.8 medium
EPSS
<1%p49
Published
()
Modified
Description

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . This attack appear to be exploitable via Attacker can execute the JavaScript into the "Create New File" and "Create New Directory" input box from 'files'.

Vendors
wolfcms
Products
wolf cms
Weakness
CWE-79
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.