Medium severity5.3NVD Advisory· Published Sep 5, 2018· Updated Jun 17, 2026

CVE-2018-15676

Description

An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprints.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bti Tracker/Xbtitllm-create

Patches

Vulnerability mechanics

References

rastating.github.io/xbtit-multiple-vulnerabilities/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000