Security Advisory
CVE-2018-17361
6.1
MEDIUM
Vulnerability Description
Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because $_SERVER['PHP_SELF'] is mishandled.
Published Date
September 23, 2018
Official Source
NIST NVD Advisory