← All advisories

Medium severity6.1NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-16519

CVE-2018-16519

Description

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Coyoapp/Coyo3 versions
cpe:2.3:a:coyoapp:coyo:10.0.11:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:coyoapp:coyo:10.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:coyoapp:coyo:12.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:coyoapp:coyo:9.0.8:*:*:*:*:*:*:*
COYO/COYOllm-fuzzy
Range: 9.0.8, 10.0.11, 12.0.4

Patches

Vulnerability mechanics

References

4

packetstormsecurity.com/files/151467/COYO-9.0.8-10.0.11-12.0.4-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/bugtraq/2019/Feb/0nvdExploitMailing ListThird Party Advisory
www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-032.txtnvdExploitThird Party Advisory
www.coyoapp.de/en/blognvdVendor Advisory

News mentions

0

No linked articles in our index yet.