CVE-2018-16624

2019-05-1313:29:01

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page.

CPENameOperatorVersion
paneleq2.2.1
paneleq2.5.4
paneleq2.5.12
paneleq2.4.0
paneleq2.0.6
paneleq2.4.1
paneleq2.5.3
paneleq2.5.6
paneleq2.5.8
paneleq2.5.11-RC-1

Name	Operator	Version
panel	eq	2.2.1
panel	eq	2.5.4
panel	eq	2.5.12
panel	eq	2.4.0
panel	eq	2.0.6
panel	eq	2.4.1
panel	eq	2.5.3
panel	eq	2.5.6
panel	eq	2.5.8
panel	eq	2.5.11-RC-1

Rows per page:

1-10 of 381

References

github.com/security-breachlock/CVE-2018-16624/blob/master/CVE-2018-16624.pdf