CVE-2018-11512

Published: 2018-05-28T13:29Z

Last Modified: 2024-11-21T03:43Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to admin/settings/general. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt