CVE-2018-16639

2019-05-1313:29:02

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation.

CPENameOperatorVersion
typesettereq4.3.2b1
typesettereq4.4rc1
typesettereq4.3b2
typesettereq4.4rc2
typesettereq4.6b3
typesettereq4.4b1
typesettereq5.0-rc1
typesettereq5.0-rc4
typesettereq4.5rc1
typesettereq5.0-rc2

Name	Operator	Version
typesetter	eq	4.3.2b1
typesetter	eq	4.4rc1
typesetter	eq	4.3b2
typesetter	eq	4.4rc2
typesetter	eq	4.6b3
typesetter	eq	4.4b1
typesetter	eq	5.0-rc1
typesetter	eq	5.0-rc4
typesetter	eq	4.5rc1
typesetter	eq	5.0-rc2

Rows per page:

1-10 of 431

References

github.com/security-provensec/CVE-2018-16639