← All advisories

Medium severity6.1NVD Advisory· Published Oct 15, 2018· Updated Jun 17, 2026

CVE-2018-18296

CVE-2018-18296

Description

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action.

Affected products

3

Metinfo/Metinfoinferred3 versions
= 6.1.2+ 2 more
- (no CPE)range: = 6.1.2
- cpe:2.3:a:metinfo:metinfo:6.1.2:*:*:*:*:*:*:*
- (no CPE)range: =6.1.2

Patches

Vulnerability mechanics

References

1

www.iwantacve.cn/index.php/archives/52/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.