CVE-2018-5479

PoC —

CVSS 3.0

6.1 medium

EPSS

2%p80

Published

Jan 15, 2018 (Jan 15, 2018)

Modified

Jun 17, 2026

Description

FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed.

Vendors: foxsash
Products: imghosting
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.