VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Nov 11, 2018· Updated Jun 17, 2026

CVE-2018-19170

CVE-2018-19170

Description

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the web_name parameter.

Affected products

3
  • Jpressprojects/Jpressinferred
    Range: = 1.0-rc.5
  • Jpress/jpress2 versions
    cpe:2.3:a:jpress:jpress:1.0:rc5:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jpress:jpress:1.0:rc5:*:*:*:*:*:*
    • (no CPE)range: = 1.0-rc.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.