CVE-2018-7265

2018-02-2022:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.0%

Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS.

CPENameOperatorVersion
shimmie2eq2.6.0
shimmie2eq2.5.1
shimmie2eq2.5.0
shimmie2eq2.5.2
shimmie2eq2.5.4
shimmie2eq2.5.3

Name	Operator	Version
shimmie2	eq	2.6.0
shimmie2	eq	2.5.1
shimmie2	eq	2.5.0
shimmie2	eq	2.5.2
shimmie2	eq	2.5.4
shimmie2	eq	2.5.3

References

github.com/shish/shimmie2/issues/631