Unrated severityOSV Advisory· Published Oct 9, 2018· Updated Aug 5, 2024
CVE-2018-18087
CVE-2018-18087
Description
The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web script or HTML via the Image URL field in the portfolio editor. The vulnerability is triggered by visiting /portfolio/${project_title}.
Affected products
1- Range: 0.8.0, 0.9.0, 0.9.1, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/Bixie/pagekit-portfolio/issues/44mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.