CVE-2018-8831

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim…

published April 18, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
99.0
In the wild
Unconfirmed
What it is

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.52009 · 99.0th percentile
Published
2018-04-18T17:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 53% → 27%
    epss
  • 06 SEP 03:12Z
    EPSS moved 53% → 27%
    epss
  • 30 AUG 16:01Z
    EPSS moved 27% → 53%
    epss
  • 29 AUG 04:43Z
    EPSS moved 53% → 27%
    epss
  • 18 APR 17:00Z
    A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim…
    cvelistv5