CVE-2018-18374: XSS
First published: Tue Oct 16 2018(Updated: )
XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Metinfo Metinfo | =6.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability description of CVE-2018-18374?
The vulnerability description of CVE-2018-18374 is XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.
What is the affected software version of CVE-2018-18374?
The affected software version of CVE-2018-18374 is MetInfo 6.1.2.
What is the severity rating of CVE-2018-18374?
The severity rating of CVE-2018-18374 is medium, with a severity value of 5.4.
How can the XSS vulnerability be exploited in CVE-2018-18374?
The XSS vulnerability in CVE-2018-18374 can be exploited by injecting malicious scripts through the anyid parameter on the admin/index.php page of MetInfo 6.1.2.
Is there a fix available for CVE-2018-18374?
Yes, a fix for CVE-2018-18374 is available. It is recommended to update to a patched version of MetInfo.
- collector/nvd-index
- vendor/metinfo
- canonical/metinfo metinfo
- version/metinfo metinfo/6.1.2