VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 4, 2018· Updated Jun 17, 2026

CVE-2018-11348

CVE-2018-11348

Description

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session.

Affected products

3
  • Yunohost/Yunohostllm-fuzzy3 versions
    2.7.2 - 2.7.14+ 2 more
    • (no CPE)range: 2.7.2 - 2.7.14
    • cpe:2.3:o:yunohost:yunohost:*:*:*:*:*:*:*:*range: >=2.7.2,<=2.7.14
    • (no CPE)range: >=2.7.2,<=2.7.14

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.