← All advisories

Medium severity5.4OSV Advisory· Published Apr 22, 2018· Updated Jun 17, 2026

CVE-2018-10268

CVE-2018-10268

Description

An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Fastadmin/FastadminOSV2 versions
v0.1.0.20170721_beta, v1.0.0.20170808_beta, v1.0.0.20170816_beta, …+ 1 more
- (no CPE)range: v0.1.0.20170721_beta, v1.0.0.20170808_beta, v1.0.0.20170816_beta, …
- (no CPE)range: V1.0.0.20180417_beta

Patches

Vulnerability mechanics

References

1

gitee.com/karson/fastadmin/issues/IJ7YZnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.