CVE-2018-5249

Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's…

published January 5, 2018

CVSS
—
EPSS
2%
Percentile
73.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin function in index.php).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01500 · 73.9th percentile
Published
2018-01-05T20:00Z
EPSS history
Timeline
  • 05 JAN 20:00Z
    Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's…
    cvelistv5