xxy961216/attack-baijiacmsV4-with-xss

xxy961216/attack-baijiacmsV4-with-xss

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-16725↗
—4.3 MEDIUM

An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component."