CVE-2018-1000139

I, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2018-03-23

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• I, Librarian (Scilico)

References

• https://github.com/mkucej/i-librarian/blob/9535753a84bc615b210802d4c9542db73368d984/stable.php#L8
• https://github.com/mkucej/i-librarian/issues/119