2 matches found
CVE-2018-10230
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455...
6.1CVSS5.8AI score0.02705EPSS
SaveExploits0References2
CVE-2018-10230
CVE-2018-10230 affects Zend Server prior to 9.1.3 where Zend Debugger is vulnerable to Cross-Site Scripting. Exploitation path identified in Nuclei templates uses the debug_host parameter to inject arbitrary HTML/JavaScript into the server response, enabling a user’s browser to execute scripts. I...
6.1CVSS6.2AI score0.02705EPSS
SaveExploits0References2Affected Software1
20