VYPR
← All advisories
Medium severity5.4OSV Advisory· Published Sep 19, 2018· Updated Jun 17, 2026

CVE-2018-16607

CVE-2018-16607

Description

Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field.

Affected products

3
  • Opmantek/Open AuditOSV2 versions
    Open-AudIT_1.12, Open-AudIT_1.12.2, Open-AudIT_1.12.2_1, …+ 1 more
    • (no CPE)range: Open-AudIT_1.12, Open-AudIT_1.12.2, Open-AudIT_1.12.2_1, …
    • cpe:2.3:a:opmantek:open-audit:2.2.7:*:*:*:professional:*:*:*
  • Open Audit/Open Audit Professionalllm-fuzzy
    Range: =2.2.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.