ADVISORIES

• CVE-2018-7261 (NVD)
• GHSA-gp82-xr77-88f4
• Vendor Advisory

GEM

radiant

SEVERITY

CVSS v3.x: 5.4 (Medium)

CVSS v2.0: 3.5 (Low)

PATCHED VERSIONS

None.

DESCRIPTION

There are multiple Persistent XSS vulnerabilities in Radiant CMS. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).