CVE-2018-11330

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-11330

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-11330

Published

2018-05-21T21:29:00.267Z

Modified

2026-04-02T00:38:20.265305Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in Pluck before 4.7.6. There is authenticated stored XSS because the character set for filenames is not properly restricted.

References

Affected packages

Type

GIT

Repo

https://github.com/pluck-cms/pluck

Events

Introduced

Fixed

Fixed

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.7.6"
        }
    ]
}

4.*

4.7

4.7.2

4.7.3

4.74

4.74-dev5

4.743

v4.*

v4.7.4

v4.744

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11330.json"