CVE-2018-15917

2018-09-0521:29:02

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.8%

JSON

Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to session/language.

CPENameOperatorVersion
joranieq0.6.5
joranieq0.4.0
joranieq0.1_beta
joranieq0.3.0
joranieq0.6.3
joranieq0.4.5
joranieq0.1.1
joranieq0.5.0
joranieq0.1.3
joranieq0.4.2