What is the severity of CVE-2018-15903?

CVE-2018-15903 has been classified as a low severity vulnerability due to the conditions required for exploitation.

How do I fix CVE-2018-15903?

To fix CVE-2018-15903, update the Discuss module to the latest version provided by Claromentis.

Who is affected by CVE-2018-15903?

CVE-2018-15903 affects users of Claromentis version 8.2.2 using the Discuss module.

What type of vulnerability is CVE-2018-15903?

CVE-2018-15903 is a stored Cross Site Scripting (XSS) vulnerability.

Can CVE-2018-15903 be exploited by low privilege users?

Yes, CVE-2018-15903 can be exploited by low privilege users to inject malicious JavaScript.

Vulnerability/
CVE-2018-15903

medium

5.4

CWE

8/10/2018

5/8/2024

CVE-2018-15903: XSS

First published: Mon Oct 08 2018(Updated: )

The Discuss v1.2.1 module in Claromentis 8.2.2 is vulnerable to stored Cross Site Scripting (XSS). An authenticated attacker will be able to place malicious JavaScript in the discussion forum, which is present in the login landing page. A low privilege user can use this to steal the session cookies from high privilege accounts and hijack these, enabling them to hijack the elevated session and perform actions in their security context.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Mentiss Acgv Acgvannu	=8.2.2

Never miss a vulnerability like this again

Reference Links

https://seclists.org/fulldisclosure/2018/Oct/12

Frequently Asked Questions

What is the severity of CVE-2018-15903?
CVE-2018-15903 has been classified as a low severity vulnerability due to the conditions required for exploitation.
How do I fix CVE-2018-15903?
To fix CVE-2018-15903, update the Discuss module to the latest version provided by Claromentis.
Who is affected by CVE-2018-15903?
CVE-2018-15903 affects users of Claromentis version 8.2.2 using the Discuss module.
What type of vulnerability is CVE-2018-15903?
CVE-2018-15903 is a stored Cross Site Scripting (XSS) vulnerability.
Can CVE-2018-15903 be exploited by low privilege users?
Yes, CVE-2018-15903 can be exploited by low privilege users to inject malicious JavaScript.

agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/references
agent/last-modified-date
agent/first-publish-date
agent/description
agent/author
agent/event
agent/source
agent/weakness
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/claromentis
canonical/mentiss acgv acgvannu
version/mentiss acgv acgvannu/8.2.2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2018-15903?
CVE-2018-15903 has been classified as a low severity vulnerability due to the conditions required for exploitation.
How do I fix CVE-2018-15903?
To fix CVE-2018-15903, update the Discuss module to the latest version provided by Claromentis.
Who is affected by CVE-2018-15903?
CVE-2018-15903 affects users of Claromentis version 8.2.2 using the Discuss module.
What type of vulnerability is CVE-2018-15903?
CVE-2018-15903 is a stored Cross Site Scripting (XSS) vulnerability.
Can CVE-2018-15903 be exploited by low privilege users?
Yes, CVE-2018-15903 can be exploited by low privilege users to inject malicious JavaScript.