VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 4, 2018· Updated Jun 17, 2026

CVE-2018-10726

CVE-2018-10726

Description

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Datenstrom/Yellowinferred3 versions
    = 0.7.3+ 2 more
    • (no CPE)range: = 0.7.3
    • cpe:2.3:a:datenstrom:yellow:0.7.3:*:*:*:*:*:*:*
    • (no CPE)range: =0.7.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.