← All advisories

Medium severity6.1NVD Advisory· Published Apr 25, 2018· Updated Jun 17, 2026

CVE-2018-10366

CVE-2018-10366

Description

An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
rainlab/user-pluginPackagist	< 1.5.0	1.5.0

Affected products

2

User Project/User
cpe:2.3:a:user_project:user:1.4.5:*:*:*:*:octobercms:*:*
ghsa-coords
pkg:composer/rainlab/user-plugin
Range: < 1.5.0

Patches

Vulnerability mechanics

References

5

github.com/rainlab/user-plugin/commit/098c2bc907443d67e9e18645f850e3de42941d20nvdPatchThird Party AdvisoryWEB
www.exploit-db.com/exploits/44546/nvdExploitThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-x5jc-34xf-c24qghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-10366ghsaADVISORY
www.exploit-db.com/exploits/44546ghsaWEB

News mentions

0

No linked articles in our index yet.