Medium severity6.1NVD Advisory· Published Feb 18, 2018· Updated Jun 17, 2026
CVE-2018-7198
CVE-2018-7198
Description
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
rainlab/blog-pluginPackagist | < 1.4.1 | 1.4.1 |
Affected products
2Patches
Vulnerability mechanics
References
6- www.exploit-db.com/exploits/44144/nvdExploitThird Party AdvisoryVDB Entry
- securitywarrior9.blogspot.com/2018/02/html-injection-october-cms.htmlnvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-96mh-7xpr-qcgwghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-7198ghsaADVISORY
- github.com/rainlab/blog-plugin/commit/6ae19a6e16ef3ba730692bc899851342c858bb94ghsaWEB
- www.exploit-db.com/exploits/44144ghsaWEB
News mentions
0No linked articles in our index yet.