Packagist/wallabag/wallabag CVE-2018-11352: medium 4, EPSS 0.72%

Wallabag cross-site scripting (XSS) vulnerability

Action: Upgrade wallabag/wallabag to 2.3.3 or later.

composer require wallabag/wallabag:2.3.3

Affected

Fixed versions

Sources

• osv: GHSA-gvcw-x64m-pfcj
• https://nvd.nist.gov/vuln/detail/CVE-2018-11352
• https://bishopfox.com/blog/wallabag-2-2-3-to-2-3-2-stored-cross-site-scripting
• https://github.com/wallabag/wallabag

CVE-2018-11352 · published 2022-05-14T02:00:29Z · modified 2024-02-16T08:15:08.424440Z · JSON