CVE-2018-7721

Published Mar 7, 2018 CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Description
Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-19436 Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data.
History

No history.

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 6:31 AM
Reserved
Mar 6, 2018, 12:00 AM
Status
Modified
Published
Mar 7, 2018, 8:29 AM
Modified
Jun 17, 2026, 2:03 AM