CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.

Date published : 2018-09-12

https://github.com/smiffy6969/razorCMS/issues/52