← All advisories

Medium severity5.4OSV Advisory· Published Dec 4, 2018· Updated Jun 17, 2026

CVE-2018-16628

CVE-2018-16628

Description

panel/login in Kirby v2.5.12 allows XSS via a blog name.

Affected products

3

Getkirby/PanelOSV
Range: 2.0.0, 2.0.2, 2.0.3, …
Getkirby/Kirby
cpe:2.3:a:getkirby:kirby:2.5.12:*:*:*:*:*:*:*
Kirby CMS/Kirby CMSllm-fuzzy
Range: =2.5.12

Patches

Vulnerability mechanics

References

1

github.com/security-breachlock/CVE-2018-16628/blob/master/kirby10.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.