Lucene search

K

MitreCVELIST:CVE-2018-19170

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2018-19170

2022-10-0316:21:55

mitre

www.cve.org

jpress

stored xss

web_name parameter

cve-2018-19170

0.001 Low

EPSS

Percentile

23.0%

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the web_name parameter.

References

github.com/JpressProjects/jpress/issues/89

0.001 Low

EPSS

Percentile

23.0%

Related for CVELIST:CVE-2018-19170

prion1 cve1 nvd1