Medium severity6.1NVD Advisory· Published Jun 17, 2018· Updated Jun 17, 2026
CVE-2018-11647
CVE-2018-11647
Description
index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
oauth2orize-fprmnpm | < 0.2.1 | 0.2.1 |
Affected products
2- cpe:2.3:a:oauth2orize-fprm_project:oauth2orize-fprm:*:*:*:*:*:*:*:*Range: <0.2.1
Patches
Vulnerability mechanics
References
4- github.com/jaredhanson/oauth2orize-fprm/commit/2bf9faee787eb004abbdfb6f4cc2fb06653defd5nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-p77r-c6m3-gj2rghsaADVISORY
- github.com/jaredhanson/oauth2orize-fprm/blob/master/SECURITY-NOTICE.mdnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-11647ghsaADVISORY
News mentions
0No linked articles in our index yet.