GitHub Advisoryadvisory · RubyGems

GHSA-gp82-xr77-88f4 radiant vulnerable to Cross-site Scripting

MEDIUM Published 2018-07-27 Modified 2023-01-26 Official page ↗
Aliases
CVE-2018-7261
Ecosystem
RubyGems
Packages
radiant
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2020-06-16

Affected packages

• RubyGems radiant: 1.1.4 (no fix yet)

Description

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).

Related

Alias · CVE (1)

  • CVE-2018-7261 There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References