CVE-2018-18308

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload area)

published October 16, 2018

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload area).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03648 · 89.5th percentile
Published
2018-10-16T22:00Z
EPSS history
Timeline
  • 16 OCT 22:00Z
    In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload area)
    cvelistv5