CVE-2018-11735

2018-06-0506:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

31.3%

JSON

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.

CPENameOperatorVersion
ximdexeqximdex-3.4
ximdexeq3.5
ximdexeq3.5-beta5
ximdexeq3.999
ximdexeq3.5-beta4
ximdexeq3.8.5
ximdexeq3.2014-master
ximdexeq4.0
ximdexeq3.9
ximdexeq3.5-beta3

Name	Operator	Version
ximdex	eq	ximdex-3.4
ximdex	eq	3.5
ximdex	eq	3.5-beta5
ximdex	eq	3.999
ximdex	eq	3.5-beta4
ximdex	eq	3.8.5
ximdex	eq	3.2014-master
ximdex	eq	4.0
ximdex	eq	3.9
ximdex	eq	3.5-beta3

Rows per page:

1-10 of 111

References

github.com/XIMDEX/ximdex/issues/146

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for OSV:CVE-2018-11735