CVE-2018-1999021

CVE-2018-1999021

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web script or HTML via the profile page editor. This attack appear to be exploitable via The victim must navigate to the attacker's profile page.

CVSS 5.4 · Medium · EPSS 0.7%

Published

2018-07-23T15:00:00.000Z

Updated

2024-09-16T22:21:15.258Z

Stack: php

Check your server →