CVE-2018-16636: Nucleuscms Nucleus CMS

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

Affected products

• Nucleuscms Nucleus CMS: version 3.70 only

Published 2018-12-10. Last modified 2026-06-17.