CVE-2018-18824

Description

WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.linkedin.com/in/subodh-kumar-8a00b1125/ ↗
• https://twitter.com/Subodhk62060242 ↗
• https://github.com/s-kustm ↗
• https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18824.pdf ↗