PatchTheCVE: no-cms projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-19902: No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.https://patchthecve.com/cve/CVE-2018-19902.htmlhttps://patchthecve.com/cve/CVE-2018-19902.htmlWed, 17 Jun 2026 01:50:05 +0000MEDIUM 4.8: No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.CVE-2018-19901: No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.https://patchthecve.com/cve/CVE-2018-19901.htmlhttps://patchthecve.com/cve/CVE-2018-19901.htmlWed, 17 Jun 2026 01:50:04 +0000MEDIUM 4.8: No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.CVE-2018-18868: No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWnamehttps://patchthecve.com/cve/CVE-2018-18868.htmlhttps://patchthecve.com/cve/CVE-2018-18868.htmlWed, 17 Jun 2026 01:48:02 +0000MEDIUM 6.1: No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.