ByteOS Network

CVE Vulnerability Details :

CVE-2018-25051

PUBLISHED

More Info Official Page

Assigner-VulDB

Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5

Published At-28 Dec, 2022 | 11:17

▼CVE Numbering Authority (CNA)

JmPotato Pomash editor.html cross site scripting

A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the file Pomash/theme/clean/templates/editor.html. The manipulation of the argument article.title/content.title/article.tag leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is be1914ef0a6808e00f51618b2de92496a3604415. It is recommended to apply a patch to fix this issue. The identifier VDB-216957 was assigned to this vulnerability.

Affected Products

Vendor

JmPotato

Product

Pomash

Versions

Affected

Problem Types

Type	CWE ID	Description
CWE	CWE-79	CWE-79 Cross Site Scripting

Metrics

Version	Base score	Base severity	Vector
3.1	2.4	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
3.0	2.4	LOW	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Timeline

Event	Date
Advisory disclosed	2022-12-28 00:00:00
VulDB entry created	2022-12-28 01:00:00
VulDB last update	2022-12-28 12:22:17

References

Hyperlink	Resource
https://vuldb.com/?id.216957	vdb-entry technical-description
https://vuldb.com/?ctiid.216957	signature permissions-required
https://github.com/JmPotato/Pomash/commit/be1914ef0a6808e00f51618b2de92496a3604415	patch

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References