CVE-2018-18845

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected…

published March 17, 2019

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The product is discontinued.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01416 · 72.5th percentile
Published
2019-03-17T19:44Z
EPSS history
Timeline
  • 17 MAR 19:44Z
    internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected…
    cvelistv5