CVE-2018-20448: Frog CMS Project Frog CMS

Medium severity, CVSS 5.4. EPSS: 1.7% chance of exploitation in the next 30 days.

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.

Affected products

• Frog CMS Project Frog CMS: version 0.9.5 only

Published 2018-12-25. Last modified 2026-06-17.