CVE-2018-13999

by Jeremyin Security Bulletinson Posted on

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).