CVE-2018-12273

2018-06-1313:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

34.0%

JSON

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.

CPENameOperatorVersion
ximdexeqximdex-3.4
ximdexeq3.5
ximdexeq3.5-beta5
ximdexeq3.999
ximdexeq3.5-beta4
ximdexeq3.8.5
ximdexeq3.2014-master
ximdexeq4.0
ximdexeq3.9
ximdexeq3.5-beta3

Name	Operator	Version
ximdex	eq	ximdex-3.4
ximdex	eq	3.5
ximdex	eq	3.5-beta5
ximdex	eq	3.999
ximdex	eq	3.5-beta4
ximdex	eq	3.8.5
ximdex	eq	3.2014-master
ximdex	eq	4.0
ximdex	eq	3.9
ximdex	eq	3.5-beta3

Rows per page:

1-10 of 111

References

github.com/XIMDEX/ximdex/issues/149

0.001 Low

EPSS

Percentile

34.0%

JSON

Related for OSV:CVE-2018-12273