### [CVE-2018-6890](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6890) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3. ### POC #### Reference - https://github.com/pradeepjairamani/WolfCMS-XSS-POC - https://github.com/pradeepjairamani/WolfCMS-XSS-POC/blob/master/Wolfcms%20v0.8.3.1%20xss%20POC%20by%20Pradeep%20Jairamani.pdf #### Github - https://github.com/0xT11/CVE-POC - https://github.com/hectorgie/PoC-in-GitHub - https://github.com/pradeepjairamani/WolfCMS-XSS-POC