CVE-2018-18824 - WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/

MEDIUM

WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/

Published Apr 25, 2019

4.8

MEDIUM

CVSS 3.0

EPSS 1.03%

WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10540		Advisory
https://github.com/s-kustm		x_refsource_MISCThird Party Advisory
https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18824.pdf		x_refsource_MISCExploitThird Party Advisory
https://twitter.com/Subodhk62060242		x_refsource_MISCThird Party Advisory
https://www.linkedin.com/in/subodh-kumar-8a00b1125/		x_refsource_MISCThird Party Advisory