Packagist/rainlab/user-plugin CVE-2018-10366: medium 6.1, EPSS 2.43%
User Plugin for October CSS Allows XSS
Action: Upgrade rainlab/user-plugin to 1.5.0 or later.
composer require rainlab/user-plugin:1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GHSA-x5jc-34xf-c24q
- https://nvd.nist.gov/vuln/detail/CVE-2018-10366
- https://github.com/rainlab/user-plugin/commit/098c2bc907443d67e9e18645f850e3de42941d20
- https://github.com/rainlab/user-plugin
- https://www.exploit-db.com/exploits/44546
CVE-2018-10366 · published · modified · JSON