CVE-2019-11427

Severity CVSS v4.0:
Pending analysis
Type:
CWE-79 Cross-Site Scripting (XSS)
Publication date:
22/04/2019
Last modified:
22/04/2019

Description

An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:idreamsoft:icms:7.0.14:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools