Skip to content

CVE-2019-18219 Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection withi...

MediumCVSS 6.1 EPSS 0.86%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection within both GET or POST requests, via a crafted URL or via the UpgradeMode POST parameter.

Affected products

ProductAffected versionsFixed in
sitemagic = 4.4.1 No fix listed

References

  • github.com release-notes third-party-advisory
  • vuldb.com permissions-required third-party-advisory