Skip to content
Heist/ feed
Back to feed
Medium

Security advisory

Type: advisorySources: OSVCVE: CVE-2018-16250

The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2018-16250
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 10:04 UTC · Revision 1

Source evidence

CVE-2018-16250

core-osv · Original source

Published 20 Jun 2019, 14:15 UTC

The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters.

osv:CVE-2018-16250
Complete source record
{
  "id": "6e5951b5be32a84f5e7c7c83ddd17e22474140053eebf1eceea392adaa1240ad",
  "url": "https://osv.dev/vulnerability/CVE-2018-16250",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2018-16250",
    "summary": "The \"utilisateur\" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the \"first name\" and \"last name\" parameters.",
    "evidence": "osv:CVE-2018-16250",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2018-16250",
      "aliases": [
        "CVE-2018-16250"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/creatiwity/witycms",
              "type": "GIT",
              "events": [
                {
                  "introduced": "07865b7167085c7580e3033d3ab6978583163e97"
                },
                {
                  "last_affected": "07865b7167085c7580e3033d3ab6978583163e97"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:creatiwity:witycms:0.6.2:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0.6.2"
                      },
                      {
                        "last_affected": "0.6.2"
                      }
                    ],
                    "source": "CPE_STRING"
                  }
                ]
              }
            }
          ],
          "versions": [
            "0.6.2"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16250.json"
          }
        }
      ],
      "modified": "2026-10-20T10:49:51.735964664Z",
      "provider": "osv",
      "references": [
        "https://github.com/Creatiwity/wityCMS/issues/156"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2018-16250",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 380877,
  "published_at": "2019-06-20T14:15:10.687+00:00"
}