Description

index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

Remediation

References

CVE-2018-20418

Related Vulnerabilities

Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-43622)

Ruby on Rails Resource Management Errors Vulnerability (CVE-2016-0751)

PHP Use After Free Vulnerability (CVE-2016-5771)

WordPress Plugin Global Content Blocks Cross-Site Request Forgery (2.1.5)

WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1.3)

Severity

Medium

Classification

CVE-2018-20418 CWE-707 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities