CVE-2018-1999021

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-07-23 · updated 2026-06-17
Weakness: CWE-79

Description

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web script or HTML via the profile page editor. This attack appear to be exploitable via The victim must navigate to the attacker's profile page.

Affected products

Gleeztech Gleezcms: 1.3.0

References

https://github.com/gleez/cms/issues/797
https://github.com/gleez/cms/issues/797

Get alerted when CVE-2018-1999021 or the next vulnerability affects your stack