CVE-2018-14877

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-14877

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-14877

Published

2018-08-03T00:29:00.363Z

Modified

2026-03-14T01:30:56.454699Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page.

References

Affected packages

Type

GIT

Repo

https://github.com/alterebro/weaselcms

Events

Introduced

Last affected

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5"
        }
    ]
}

v0.*

v0.1

v0.2

v0.3.0

v0.3.3

v0.3.5

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14877.json"