CVE-2018-19461: Phome Empirecms

Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days.

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.

Affected products

• Phome Empirecms: up to and including 7.5.0

Published 2019-06-07. Last modified 2026-06-17.