CVE-2018-13998

2018-07-1212:29:00

Google

osv.dev

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

JSON

ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.

CPENameOperatorVersion
clippercmseqclipper_1.2.8
clippercmseqclipper_1.2.9
clippercmseq0.1.0-pre1
clippercmseqclipper_1.3.2
clippercmseqclipper_1.2.1
clippercmseq0.1.0-pre3.2
clippercmseq0.1.0-pre3.1
clippercmseqclipper_1.2.0
clippercmseq1.0.5
clippercmseqclipper_1.2.7

Name	Operator	Version
clippercms	eq	clipper_1.2.8
clippercms	eq	clipper_1.2.9
clippercms	eq	0.1.0-pre1
clippercms	eq	clipper_1.3.2
clippercms	eq	clipper_1.2.1
clippercms	eq	0.1.0-pre3.2
clippercms	eq	0.1.0-pre3.1
clippercms	eq	clipper_1.2.0
clippercms	eq	1.0.5
clippercms	eq	clipper_1.2.7

Rows per page:

1-10 of 361

References

github.com/ClipperCMS/ClipperCMS/issues/491