Lucene search
GoogleOSV:CVE-2018-20418HistoryDec 24, 2018 - 4:29 a.m.
CVE-2018-20418
2018-12-2404:29:00
Google
osv.dev
1
index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cms | eq | 2.6.2776 | |
| cms | eq | 2.2.2604 | |
| cms | eq | 1.4.0-alpha.2506 | |
| cms | eq | 3.0.0-beta.19 | |
| cms | eq | 0.9.2204 | |
| cms | eq | 1.3.2473 | |
| cms | eq | 1.0.2278 | |
| cms | eq | 1.4.0-alpha.2503 | |
| cms | eq | 2.3.0-alpha.2602 | |
| cms | eq | 2.5.0-beta.2722 |
Related
packetstorm
packetstorm
Craft CMS 3.0.25 Cross Site Scripting
2018-12-25 00:00:00
zdt
zdt
Craft CMS 3.0.25 - Cross-Site Scripting Vulnerability
2018-12-27 00:00:00
cvelist
cvelist
CVE-2018-20418
2018-12-24 04:00:00
nvd
nvd
CVE-2018-20418
2018-12-24 04:29:00
osv
osv
Craft CMS Cross-site Scripting (XSS) Vulnerability
2022-05-14 01:20:01
exploitpack
exploitpack
Craft CMS 3.0.25 - Cross-Site Scripting
2018-12-27 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-12-26 01:27:39
github
github
Craft CMS Cross-site Scripting (XSS) Vulnerability
2022-05-14 01:20:01
cve
cve
CVE-2018-20418
2018-12-24 04:29:00
prion
prion
Cross site scripting
2018-12-24 04:29:00
exploitdb
exploitdb
Craft CMS 3.0.25 - Cross-Site Scripting
2018-12-27 00:00:00