Design/Logic Flaw

2018-11-0316:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

28.6%

xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor’s source-code view.

CPENameOperatorVersion
xheditoreq1.2.2

CPE	Name	Operator	Version
	xheditor	eq	1.2.2

References

github.com/yaniswang/xhEditor/issues/37

0.001 Low

EPSS

Percentile

28.6%

Related for PRION:CVE-2018-18909