CVE-2018-11348

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application

published December 4, 2018

CVSS
—
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00622 · 48.9th percentile
Published
2018-12-04T17:00Z
EPSS history
Timeline
  • 04 DEC 17:00Z
    Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application
    cvelistv5