Medium severity6.1NVD Advisory· Published Jan 17, 2019· Updated Jun 17, 2026

CVE-2018-20731

Description

A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php.

Affected products

Nedit/Neditllm-fuzzy
Range: <1.7Cp3
Linux Foundation/Nediinferred
Range: <1.7Cp3
Nedi/Nedi
cpe:2.3:a:nedi:nedi:*:*:*:*:*:*:*:*
Range: <=1.7c

Patches

Vulnerability mechanics

References

www.sakerhetskontoret.com/disclosures/nedi/report.htmlnvdExploitThird Party Advisory
www.nedi.ch/end-of-year-update/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000