EUVD-2018-20327

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

WSO2 Identity Server before 5.5.0 has XSS vulnerability in dashboard for low-privileged attackers.

Reporter	Title	Published	Views	Family All 12
0day.today	WSO2 Identity Server 5.3.0 Cross Site Scripting Vulnerability	24 Apr 201800:00	–	zdt
ATTACKERKB	CVE-2018-8716	25 Apr 201820:29	–	attackerkb
CNVD	WSO2 Identity Server dashboard cross-site scripting vulnerability	27 Apr 201800:00	–	cnvd
Check Point Advisories	WSO2 Identity Server Cross Site Scripting (CVE-2018-8716)	28 Nov 202200:00	–	checkpoint_advisories
CVE	CVE-2018-8716	25 Apr 201820:00	–	cve
Cvelist	CVE-2018-8716	25 Apr 201820:00	–	cvelist
Exploit DB	WSO2 Carbon / WSO2 Dashboard Server 5.3.0 - Persistent Cross-Site Scripting	24 Apr 201800:00	–	exploitdb
exploitpack	WSO2 Carbon WSO2 Dashboard Server 5.3.0 - Persistent Cross-Site Scripting	24 Apr 201800:00	–	exploitpack
NVD	CVE-2018-8716	25 Apr 201820:29	–	nvd
OSV	CVE-2018-8716	25 Apr 201820:29	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "540bb09d-ef37-3bc3-94f3-0a4b70023b68",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "e9e53788-66fa-3c7c-8804-b9b4bb29ca63",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2018-8716
sec-consult	www.sec-consult.com/en/blog/advisories/multiple-stored-xss-vulnerabilities-in-wso2-carbon-and-dashboard-server/index.html
seclists	www.seclists.org/fulldisclosure/2018/Apr/45
packetstormsecurity	www.packetstormsecurity.com/files/147330/WSO2-Identity-Server-5.3.0-Cross-Site-Scripting.html
exploit-db	www.exploit-db.com/exploits/44531/
securityfocus	www.securityfocus.com/archive/1/541954/100/0/threaded
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.4Medium risk

Vulners AI Score5.4

CVSS 35.4

CVSS 23.5

EPSS0.00956