CVE-2018-16250

PoC —

CVSS 3.0

5.4 medium

EPSS

<1%p48

Published

Jun 20, 2019 (Jun 20, 2019)

Modified

Jun 17, 2026

Description

The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters.

Vendors: creatiwity
Products: witycms
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.