CVE-2018-8069 QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.
MediumCVSS 5.4
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qcms | = 3.0 | No fix listed |
References
- github.com exploit third-party-advisory