Unrated severityNVD Advisory· Published Dec 17, 2015· Updated May 6, 2026

CVE-2015-7518

Description

Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global parameters, (2) smart class parameters, or (3) smart variables in the (a) host or (b) hostgroup edit forms.

Affected products

Theforeman/Foreman
cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*
Range: <=1.9.3

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

theforeman.org/security.htmlnvdVendor Advisory
projects.theforeman.org/issues/12611nvd
www.openwall.com/lists/oss-security/2015/12/09/6nvd
access.redhat.com/errata/RHSA-2016:0174nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000