Description Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI. Remediation References CVE-2018-12100 Related Vulnerabilities XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-29517) WordPress Plugin twimp-wp-twitter multi publisher Cross-Site Request Forgery (0.1) MySQL CVE-2015-4879 Vulnerability (CVE-2015-4879) WordPress Plugin Flip Book 'php.php' Arbitrary File Upload (1.0) PHP Interpretation Conflict Vulnerability (CVE-2025-1217) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2018-12100