CVE-2018-9928: XSS
Published Apr 10, 2018
·Updated
Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter.
Affected Software
1 affected component
Metinfo Metinfo=6.0.0
Event History
Apr 10, 2018
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Data Sourced
via NVD·06:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9928?
The severity of CVE-2018-9928 is medium with a CVSS score of 6.1.
2
How does CVE-2018-9928 affect MetInfo?
CVE-2018-9928 affects MetInfo version 6.0.0.
3
What is the CWE ID for CVE-2018-9928?
The CWE ID for CVE-2018-9928 is CWE-79.
4
How can remote attackers exploit CVE-2018-9928?
Remote attackers can exploit CVE-2018-9928 by injecting arbitrary web script or HTML via the webname or weburl parameter in save.php.
5
Is there a patch available for CVE-2018-9928?
There is currently no patch available for CVE-2018-9928. It is recommended to mitigate the vulnerability by implementing input validation and output encoding.