Craft CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-20418 - Vulnerability Database

Craft CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-20418

Medium

Reference: CVE-2018-20418

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-20418

Title: Craft CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

index.phppadmin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.