CVE-2018-1000841: XSS
First published: Thu Dec 20 2018(Updated: )
Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code in the context of the victim's browser.. This attack appear to be exploitable via HTTP POST request. This vulnerability appears to have been fixed in 5.16-1 Beta.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zend Zendto | <5.15-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-1000841?
The severity of CVE-2018-1000841 is medium (6.1).
What is the vulnerability description of CVE-2018-1000841?
CVE-2018-1000841 is a Cross Site Scripting (XSS) vulnerability in Zend.To version Prior to 5.15-1, which allows an attacker to execute arbitrary JavaScript code in the victim's browser.
How is CVE-2018-1000841 exploited?
CVE-2018-1000841 can be exploited through an HTTP POST request.
Which software versions are affected by CVE-2018-1000841?
Zend.To version Prior to 5.15-1 is affected by CVE-2018-1000841.
How can I fix CVE-2018-1000841?
Upgrade to Zend.To version 5.15-1 or later to fix CVE-2018-1000841.
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/zend
- canonical/zend zendto