CVE-2017-11611 | BDVDB-2026-90096 Detail

Description#

Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/file_manager/" script (aka an /admin/plugin/file_manager/browse// URI).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc

Exploit#

No public exploit known

History#

Version 12017-09-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.