CVE-2018-1000521

BigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privileged(Developer) users.. This attack appear to be exploitable via no. This vulnerability appears to have been fixed in after commit b652cfdc14d0670c81ac4401ad5a04376745c279.
References
Link Resource
https://github.com/bigtreecms/BigTree-CMS/issues/328 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bigtreecms:bigtree_cms:4.2.21:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-06-26 16:29

Updated : 2024-02-04 19:46


NVD link : CVE-2018-1000521

Mitre link : CVE-2018-1000521

CVE.ORG link : CVE-2018-1000521


JSON object : View

Products Affected

bigtreecms

  • bigtree_cms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')