CVE-2018-7198

🗓️ 18 Feb 2018 03:00:29Reported by [email protected]Type

October CMS XSS vulnerability CVE-2018-7198

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2018-7198	18 Feb 201803:00	–	cvelist
Prion	Deserialization of untrusted data	18 Feb 201803:29	–	prion
OSV	CVE-2018-7198	18 Feb 201803:29	–	osv
OSV	October CMS - RainLab Blog Plugin XSS	13 May 202201:24	–	osv
Exploit DB	October CMS < 1.0.431 - Cross-Site Scripting	19 Feb 201800:00	–	exploitdb
0day.today	October CMS < 1.0.431 - Cross-Site Scripting Vulnerability	20 Feb 201800:00	–	zdt
CVE	CVE-2018-7198	18 Feb 201803:29	–	cve
Github Security Blog	October CMS - RainLab Blog Plugin XSS	13 May 202201:24	–	github
Packet Storm	October CMS Cross Site Scripting	19 Feb 201800:00	–	packetstorm

Nvd

Node

octobercms octoberRange≤1.0.431

Source	Link
exploit-db	www.exploit-db.com/exploits/44144/
securitywarrior9	www.securitywarrior9.blogspot.com/2018/02/html-injection-october-cms.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Feb 2018 03:29Current

6Medium risk

Vulners AI Score6

CVSS24.3

CVSS36.1

EPSS0.001

CWE-79