CVE-2018-18029

Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
Configurations

Configuration 1 (hide)

cpe:2.3:a:naviwebs:navigate_cms:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:55

Type Values Removed Values Added
References () https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866 - Patch, Third Party Advisory () https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866 - Patch, Third Party Advisory
References () https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms - Exploit, Mitigation, Third Party Advisory () https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms - Exploit, Mitigation, Third Party Advisory

Information

Published : 2018-10-09 17:29

Updated : 2024-11-21 03:55


NVD link : CVE-2018-18029

Mitre link : CVE-2018-18029

CVE.ORG link : CVE-2018-18029


JSON object : View

Products Affected

naviwebs

  • navigate_cms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')