CVE-2018-17113: Easycms

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173.

Affected products

• Easycms Easycms: version 1.5 only

Published 2018-09-17. Last modified 2026-06-17.