What’s Vulnerable › Vulnerabilities
CVE-2018-1000084
- Severity: medium (CVSS 5.4 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-03-13 · updated 2026-06-17
- Weakness: CWE-79
Description
WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege user can steal the cookie of admin user and compromise the admin account. This attack appear to be exploitable via Need to enter the Javascript code into Layout Name .
Affected products
- WolfCMS: 0.8.3.1
References
Get alerted when CVE-2018-1000084 or the next vulnerability affects your stack