CVE-2018-1999008

October CMS version prior to build 437 contains a Cross Site Scripting (XSS) vulnerability in the Media module and create folder functionality that can result…

published July 23, 2018

CVSS
—
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

October CMS version prior to build 437 contains a Cross Site Scripting (XSS) vulnerability in the Media module and create folder functionality that can result in an Authenticated user with media module permission creating arbitrary folder name with XSS content. This attack appear to be exploitable via an Authenticated user with media module permission who can create arbitrary folder name (XSS). This vulnerability appears to have been fixed in build 437.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Published
2018-07-23T15:00Z
EPSS history
Timeline
  • 23 JUL 15:00Z
    October CMS version prior to build 437 contains a Cross Site Scripting (XSS) vulnerability in the Media module and create folder functionality that can result…
    cvelistv5