CVE-2018-16773: Easycms

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.

Affected products

• Easycms Easycms: version 1.5 only

Published 2018-09-10. Last modified 2026-06-17.