Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-10061
HistoryApr 12, 2018 - 4:29 p.m.

Design/Logic Flaw

2018-04-1216:29:00
PRIOn knowledge base
www.prio-n.com
5

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).

CPENameOperatorVersion
cactile1.1.36
debian_linuxeq9.0

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%