Medium severity6.1NVD Advisory· Published Apr 18, 2018· Updated Jun 17, 2026

CVE-2018-8831

Description

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xbmc/Xbmcinferred
Range: <=17.6
Kodi/Kodillm-fuzzy2 versions
<=17.6+ 1 more
- (no CPE)range: <=17.6
- cpe:2.3:a:kodi:kodi:*:*:*:*:*:*:*:*range: <=17.6

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2018/Apr/36nvdExploitMailing ListThird Party Advisory
www.exploit-db.com/exploits/44487/nvdExploitThird Party AdvisoryVDB Entry
trac.kodi.tv/ticket/17814nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.043
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000