Vulnerabilities > Alchemy CMS

DATE CVE VULNERABILITY TITLE RISK
2018-10-16 CVE-2018-18307 Cross-site Scripting vulnerability in Alchemy-Cms Alchemy CMS 4.1.0
A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field.
network
low complexity
alchemy-cms CWE-79
6.1