CVE-2018-5216 (radiant): Radiant CMS 1.1.4 Markdown admin/pages/*/edit part_body_content cross site scripting

January 4th, 2018

ADVISORIES

GEM

SEVERITY

CVSS v3.x: 5.4 (Medium)

CVSS v2.0: 3.5 (Low)

PATCHED VERSIONS

None.

DESCRIPTION

Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.