CVE-2018-10364 BigTree before 4.2.22 has XSS in the Users management page via the name or company field.
MediumCVSS 5.4
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BigTree before 4.2.22 has XSS in the Users management page via the name or company field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bigtreecms bigtree cms | < 4.2.22 | 4.2.22 |
References
- github.com release-notes
- github.com patch
- github.com issue-tracking third-party-advisory