CVE-2018-11564

Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website pointing to "/storage/poc.svg" that will point to http://localhost/pagekit/storage/poc.svg. When a user comes along to click that link, it will trigger a XSS attack.

• CWE-79

• http://ruffsecurity.blogspot.com/2018/05/my-first-cve-found.htmlExploit, Third Party Advisory
• https://packetstormsecurity.com/files/148001/PageKit-CMS-1.0.13-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44837/Exploit, Third Party Advisory, VDB Entry
• http://ruffsecurity.blogspot.com/2018/05/my-first-cve-found.htmlExploit, Third Party Advisory
• https://packetstormsecurity.com/files/148001/PageKit-CMS-1.0.13-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44837/Exploit, Third Party Advisory, VDB Entry

Published

Jun 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11559DomainMod 4.10.0 has Stored XSS in the "/settings/profile/in…
• CVE-2018-1156Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to …
• CVE-2018-11560The webService binary on Insteon HD IP Camera White 2864-222…9.8
• CVE-2018-11561An integer overflow in the unprotected distributeToken funct…7.5
• CVE-2018-11562An issue was discovered in MISP 2.4.91. A vulnerability in a…
• CVE-2018-11563An issue was discovered in Open Ticket Request System (OTRS)…4.6
• CVE-2018-11565Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.…
• CVE-2018-11567Prior to 2018-04-27, the reprompt feature in Amazon Echo dev…
• CVE-2018-11568Reflected XSS is possible in the GamePlan theme through 1.5.…
• CVE-2018-11569Controller/ListController.php in Eventum 3.5.0 is vulnerable…
• CVE-2018-1157Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to …
• CVE-2018-11571ClipperCMS 1.3.3 allows Session Fixation.