CVE-2019-17522: Hotarucms

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the admin_index.php?page=settings SITE NAME field (aka SITE_NAME), a related issue to CVE-2011-4709.1.

Affected products

• Hotarucms Hotarucms: version 1.7.2 only

Published 2019-10-12. Last modified 2026-06-17.