CVE-2018-7721: XSS
Published Mar 7, 2018
·Updated
Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data.
Affected Software
1 affected component
Metinfo Metinfo=6.0.0
Event History
Mar 7, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Data Sourced
via NVD·08:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-7721?
CVE-2018-7721 is a vulnerability in MetInfo 6.0.0 that allows for Cross Site Scripting (XSS) attacks.
2
How does the CVE-2018-7721 vulnerability manifest?
The vulnerability exists in MetInfo 6.0.0 through the /feedback/index.php page, which mishandles input data in the app/system/feedback/web/feedback.class.php file.
3
What is the severity level of CVE-2018-7721?
The severity level of CVE-2018-7721 is medium with a CVSS score of 6.1.
4
How can I fix CVE-2018-7721 vulnerability in MetInfo 6.0.0?
To fix the CVE-2018-7721 vulnerability, it is recommended to update MetInfo to a version that addresses the issue.
5
Where can I find more information about the CVE-2018-7721 vulnerability?
More information about the CVE-2018-7721 vulnerability can be found at the following reference: https://github.com/Gitaddy/vluns/blob/master/Metinfo.md