VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 4, 2018· Updated Jun 17, 2026

CVE-2018-10726

CVE-2018-10726

Description

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Datenstrom/Yellowinferred2 versions
    = 0.7.3+ 1 more
    • (no CPE)range: = 0.7.3
    • (no CPE)range: =0.7.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.