CVE-2018-19509

wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding

published March 17, 2019

CVSS
—
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01058 · 64.2th percentile
Published
2019-03-17T21:49Z
EPSS history
Timeline
  • 17 MAR 21:49Z
    wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding
    cvelistv5