radiantcms vulnerabilities

Products

• radiant cms 2

Latest radiantcms CVEs

Newest publication first

1. CVE-2018-7261 radiant vulnerable to Cross-site Scripting

   Published 2018-02-21

   Medium·CVSS 5.4 EPSS 0.60%

   There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).

2. CVE-2018-5216 Radiant CMS vulnerable to Cross-site Scripting

   Published 2018-01-04

   Medium·CVSS 5.4 EPSS 0.54%

   Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.