CVE-2015-5454

Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item.

Date published : 2015-07-08

http://www.securityfocus.com/bid/75694

https://github.com/NucleusCMS/NucleusCMS/issues/83