CVE-2018-18416

PoC ×2—

CVSS 3.0

4.8 medium

EPSS

2%p75

Published

Oct 19, 2018 (Oct 19, 2018)

Modified

Jun 17, 2026

Description

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name parameter to the admin/settings/update URI.

Vendors: pokkho
Products: lango
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.