CVE-2018-20017: Sem-CMS Semcms

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI.

Affected products

• Sem-CMS Semcms: version 3.5 only

Published 2018-12-10. Last modified 2026-06-17.