CVE-2018-20418
1 advisory.
Packagist/craftcms/cms CVE-2018-20418: medium 4.8, EPSS 3.70%
Craft CMS Cross-site Scripting (XSS) Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.25 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-72pf-cvwq-vgqg
- https://nvd.nist.gov/vuln/detail/CVE-2018-20418
- https://github.com/craftcms/cms
- https://github.com/rdincel1/Craft-CMS-3.0.25---Cross-Site-Scripting
- https://web.archive.org/web/20201208014852/https://www.raifberkaydincel.com/craft-cms-3-0-25-cross-site-scripting-vulnerability.html
- https://www.exploit-db.com/exploits/46054
CVE-2018-20418 · published · modified · JSON