old CVE CVE-2018-19917

CVE-2018-19917.md

Link: https://www.invicti.com/web-applications-advisories/ns-18-038-reflected-cross-site-scripting-in-microweber/

In file userfiles\modules\content\controllers\Manager.php

function index($params){
//...
$post_toolbar_view = $this->views_dir . 'toolbar.php';

$toolbar = new View($post_toolbar_view);
//...
$toolbar->assign('params', $params);
//...
$view->assign('toolbar', $toolbar);
//...
return $view->display();
//...
}

In file userfiles\modules\content\views\toolbar.php

value="<?php if (isset($params['keyword']) and $params['keyword'] != false): ?><?php print $params['keyword'] ?><?php endif; ?>"