Description admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag. Remediation References CVE-2018-13423 Related Vulnerabilities MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-12466) WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.3) SugarCRM Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2019-17315) Oracle Application Server CVE-2008-3986 Vulnerability (CVE-2008-3986) WordPress Plugin Share on Diaspora Cross-Site Scripting (0.7.1) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2018-13423