CVE-2018-7746

An issue was discovered in Western Bridge Cobub Razor 0.7.2

published March 7, 2018

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03133 · 87.8th percentile
Published
2018-03-07T17:00Z
EPSS history
Timeline
  • 07 MAR 17:00Z
    An issue was discovered in Western Bridge Cobub Razor 0.7.2
    cvelistv5