CVE-2018-18909

2018-11-0316:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor’s source-code view.

CPENameOperatorVersion
xheditoreq1.2.2

CPE	Name	Operator	Version
	xheditor	eq	1.2.2

References

github.com/yaniswang/xhEditor/issues/37