CVE-2018-10726

2022-10-0316:22:15

mitre

www.cve.org

cve-2018-10726

datenstrom yellow

stored xss

0.001 Low

EPSS

Percentile

24.8%

JSON

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an “Edit page” action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS

References

github.com/datenstrom/yellow/issues/321

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for CVELIST:CVE-2018-10726