Lucene search

MitreCVE-2018-14936

HistoryAug 05, 2018 - 1:29 a.m.

CVE-2018-14936

2018-08-0501:29:00

CWE-79

mitre

web.nvd.nist.gov

vulnerability

xss

my little forum

2.4.12

cve-2018-14936

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.8%

JSON

The Add page option in my little forum 2.4.12 allows XSS via the Title field.

Affected configurations

Nvd

Node

mylittleforummy_little_forumMatch2.4.12

VendorProductVersionCPE
mylittleforummy_little_forum2.4.12cpe:2.3:a:mylittleforum:my_little_forum:2.4.12:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mylittleforum	my_little_forum	2.4.12	cpe:2.3:a:mylittleforum:my_little_forum:2.4.12:::::::*

References

owendarlene.com/stored-xss-my-little-forum/

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.8%

JSON

Related for CVE-2018-14936