CVE-2018-7274
1 advisory.
Packagist/yab/quarx CVE-2018-7274: medium 6.1
Yab Quarx persistent cross-site scripting vulnerability
Action: Upgrade yab/quarx to 2.4.5 or later.
composer require yab/quarx:2.4.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.5 | - |
Fixed versions
| 2.4.5 |
Sources
- osv: GHSA-h4fh-gpvh-753g
- https://nvd.nist.gov/vuln/detail/CVE-2018-7274
- https://github.com/GrafiteInc/CMS/issues/115
- https://github.com/YABhq/Quarx/issues/116
- https://github.com/GrafiteInc/CMS/commit/dcc1a5ac3c6d48afd3b8b9d8b11a9c6bfeb75f77
- https://github.com/GrafiteInc/CMS
- http://seclists.org/bugtraq/2018/Feb/53
- http://www.securityfocus.com/bid/103081
CVE-2018-7274 · published · modified · JSON