CVE-2018-10268: XSS
Published Apr 21, 2018
·Updated
An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter.
Affected Software
1 affected component
fastadmin FastAdmin=1.0.0.20180417-beta
Event History
Apr 21, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-10268?
CVE-2018-10268 is classified as a high severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2018-10268?
To mitigate CVE-2018-10268, it is recommended to validate and sanitize user inputs for the avatar parameter in the application.
3
What software versions are affected by CVE-2018-10268?
CVE-2018-10268 affects FastAdmin version 1.0.0.20180417_beta.
4
What type of vulnerability is CVE-2018-10268?
CVE-2018-10268 is an XSS vulnerability that allows attackers to inject malicious scripts through user inputs.
5
Is there a known exploit for CVE-2018-10268?
Yes, CVE-2018-10268 can be exploited by attackers to execute scripts in the context of a user's session.