CVE-2018-19465: Maccms

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/system_config.html, related to template/paody/html/vod_index.html.

Affected products

• Maccms Maccms: up to and including 8.0

Published 2019-06-07. Last modified 2026-06-17.