Stored XSS Vulnerability in ClipperCMS 1.3.3 via Full Name Field in Manager Users and Web Users

Stored XSS Vulnerability in ClipperCMS 1.3.3 via Full Name Field in Manager Users and Web Users

CVE-2018-13998 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.

Learn more about our Web App Pen Testing.