CVE-2018-16725: Baijiacms Project Baijiacms

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component."

Affected products

• Baijiacms Project Baijiacms: version 4.0 only

Published 2018-09-08. Last modified 2026-06-17.