CVE-2018-7198
1 advisory.
Packagist/rainlab/blog-plugin CVE-2018-7198: medium 6.1
October CMS - RainLab Blog Plugin XSS
Action: Upgrade rainlab/blog-plugin to 1.4.1 or later.
composer require rainlab/blog-plugin:1.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.1 | - |
Fixed versions
| 1.4.1 |
Sources
- osv: GHSA-96mh-7xpr-qcgw
- https://nvd.nist.gov/vuln/detail/CVE-2018-7198
- https://github.com/rainlab/blog-plugin/commit/6ae19a6e16ef3ba730692bc899851342c858bb94
- https://github.com/rainlab/blog-plugin
- https://www.exploit-db.com/exploits/44144
- http://securitywarrior9.blogspot.com/2018/02/html-injection-october-cms.html
CVE-2018-7198 · published · modified · JSON