CVE-2018-14973

NONE
Published Aug 6, 20187y ago · Modified Jun 17, 20261w ago
Find Similar
Published Aug 6, 2018 7y ago
Last Modified Jun 17, 2026 1w ago

Description

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
q-cmsqcms3.0.1any

References 1

  • github.com https://github.com/AvaterXXX/QCMS/blob/master/README.md
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.