CVE-2018-16728

2018-09-1216:29:03

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.8%

JSON

feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.

CPENameOperatorVersion
feindura-flat-file-cmseq1.1.1
feindura-flat-file-cmseq2.0
feindura-flat-file-cmseq2.0.1
feindura-flat-file-cmseq1.1.3
feindura-flat-file-cmseq1.1.2
feindura-flat-file-cmseq1.1.4
feindura-flat-file-cmseq2.0.4
feindura-flat-file-cmseq2.0.7
feindura-flat-file-cmseq1.1.5
feindura-flat-file-cmseq2.0.2

Name	Operator	Version
feindura-flat-file-cms	eq	1.1.1
feindura-flat-file-cms	eq	2.0
feindura-flat-file-cms	eq	2.0.1
feindura-flat-file-cms	eq	1.1.3
feindura-flat-file-cms	eq	1.1.2
feindura-flat-file-cms	eq	1.1.4
feindura-flat-file-cms	eq	2.0.4
feindura-flat-file-cms	eq	2.0.7
feindura-flat-file-cms	eq	1.1.5
feindura-flat-file-cms	eq	2.0.2