CVE-2018-10726

2022-10-0316:22:15

mitre

github.com

cve-2018-10726

edit page action

xss vulnerability

datenstrom yellow

parsersafemode

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an “Edit page” action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS

References

github.com/datenstrom/yellow/issues/321