CVE-2018-16780

Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment.

• CWE-79

• https://github.com/dusaurabh/PHP/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://github.com/dusaurabh/PHP/issues/1Exploit, Issue Tracking, Third Party Advisory

Published

Sep 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16773EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/upd…
• CVE-2018-16774HongCMS 3.0.0 allows arbitrary file deletion via a ../ in th…
• CVE-2018-16775An issue was discovered in Victor CMS through 2018-05-10. Th…
• CVE-2018-16776wityCMS 0.6.2 has XSS via the "Site Name" field found in the…
• CVE-2018-16778Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 …
• CVE-2018-16779BlogCMS through 2016-10-25 has XSS via a comment.
• CVE-2018-16781ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attacke…
• CVE-2018-16782libimageworsener.a in ImageWorsener 1.3.2 has a buffer overf…
• CVE-2018-16784DedeCMS 5.7 SP2 allows XML injection, and resultant remote c…
• CVE-2018-16785XML injection vulnerability exists in the file of DedeCMS V5…
• CVE-2018-16786DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in …
• CVE-2018-16789libhttp/url.c in shellinabox through 2.20 has an implementat…