CVE-2018-16805

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to…

published September 10, 2018

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00760 · 54.8th percentile
Published
2018-09-10T23:00Z
EPSS history
Timeline
  • 10 SEP 23:00Z
    In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to…
    cvelistv5