CVE-2019-18219
23.10.2019, 14:15
Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection within both GET or POST requests, via a crafted URL or via the UpgradeMode POST parameter.
| Vendor | Product | Version |
|---|---|---|
| sitemagic | sitemagic | 4.4.1 |
𝑥
= Vulnerable software versions