Description (CNA)
Windu CMS is vulnerable to multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the page editing endpoint windu/admin/content/pages/edit/. This vulnerability can be exploited by a privileged user and may target users with higher privileges. Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| JCD / Windu CMS | affected 0 through 4.1 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.