CVE-2018-25054

CVE-2018-25054 affects shred cilla. The vulnerability lies in the Search Handler’s search.jsp (cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp), where manipulating the details argument leads to cross-site scripting. The issue is exploitable remotely, requiring no local access beyond reac...