← All advisories

Medium severity6.1NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-20302

CVE-2018-20302

Description

An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
xainHex	< 0.6.2	0.6.2

Affected products

2

Emetrotel/Xain
cpe:2.3:a:emetrotel:xain:*:*:*:*:*:*:*:*
Range: <0.6.2
ghsa-coords
pkg:hex/xain
Range: < 0.6.2

Patches

Vulnerability mechanics

References

4

github.com/smpallen99/xain/issues/18nvdIssue TrackingPatchThird Party AdvisoryWEB
github.com/dependabot/elixir-security-advisories/blob/master/packages/xain/2018-09-03.ymlnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-5chx-gg25-v37mghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20302ghsaADVISORY

News mentions

0

No linked articles in our index yet.