← back
CVE-2018-20418

CVE-2018-20418

EPSS 3.7%
index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/46054/unverifiedexploitdbwww.exploit-db.com/exploits/46054unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.mdhttps://github.com/rdincel1/Craft-CMS-3.0.25---Cross-Site-Scriptinghttps://www.exploit-db.com/exploits/46054/https://www.raifberkaydincel.com/craft-cms-3-0-25-cross-site-scripting-vulnerability.html