CVE-2018-0499

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by…

published July 2, 2018

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01043 · 63.6th percentile
Published
2018-07-02T12:00Z
EPSS history
Timeline
  • 02 JUL 12:00Z
    A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by…
    cvelistv5