CVE-2018-19546

JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter

published November 26, 2018

CVSS
—
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00544 · 44.9th percentile
Published
2018-11-26T07:00Z
EPSS history
Timeline
  • 26 NOV 07:00Z
    JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter
    cvelistv5