CVE-2018-1000084 | BDVDB-2026-97756 Detail

Description#

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege user can steal the cookie of admin user and compromise the admin account. This attack appear to be exploitable via Need to enter the Javascript code into Layout Name .

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/wolfcms/wolfcms/issues/667

Exploit#

No public exploit known

History#

Version 12018-03-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.