Lucene search
Veracode Vulnerability DatabaseVERACODE:6193HistoryApr 26, 2018 - 3:14 a.m.
Cross-site Scripting (XSS)
2018-04-2603:14:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
33.4%
rainlab/user-plugin is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the improper use of form_value which does not provide escaping of user input, allowing XSS to occur.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rainlab/user-plugin | eq | dev-master | |
| rainlab/user-plugin | eq | dev-notify | |
| rainlab/user-plugin | eq | dev |
Related
cve
cve
CVE-2018-10366
2018-04-25 09:29:00
cvelist
cvelist
CVE-2018-10366
2018-04-25 09:00:00
exploitpack
exploitpack
October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting
2018-04-26 00:00:00
prion
prion
Design/Logic Flaw
2018-04-25 09:29:00
osv
osv
CVE-2018-10366
2018-04-25 09:29:00
User Plugin for October CSS Allows XSS
2022-05-14 03:21:09
nvd
nvd
CVE-2018-10366
2018-04-25 09:29:00
zdt
zdt
github
github
User Plugin for October CSS Allows XSS
2022-05-14 03:21:09
packetstorm
packetstorm
October CMS User 1.4.5 Cross Site Scripting
2018-04-26 00:00:00
exploitdb
exploitdb
October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting
2018-04-26 00:00:00