Security Advisory
CVE-2018-18488
9.8
CRITICAL
Vulnerability Description
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter.
Published Date
October 18, 2018
Official Source
NIST NVD Advisory