CVE-2018-25090

—

CVSS 3.1

5.4 medium

EPSS

<1%p33

Published

Mar 13, 2024 (Mar 13, 2024)

Modified

Jun 17, 2026

Description

An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This leads to a limited impact of confidentiality and integrity but no impact of availability.

Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.