CVE-2018-18296

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-10-15

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Metinfo (Metinfo)

References

• http://www.iwantacve.cn/index.php/archives/52/