CVE-2018-16316

A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inject arbitrary JavaScript and/or HTML via the Team Name field.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-09-01

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Portainer (Portainer)

References

• https://github.com/portainer/portainer/commit/1ad150c99460a35224d6adfe48ddda9ee056b7d2