CVE-2018-16484 - AskarLabs CVE Database

CVE-2018-16484

Vendor Hackerone

Product m-server

Weakness CWE-79 · XSS

Published February 1, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.

Key dates

02Disclosure timeline

February 1, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-16484 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-10724 Stored XSS in IPV6 Section in phpipam/phpipam CVE-2024-30145 HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability CVE-2024-10887 NiceJob <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2022-1439 Reflected XSS on demo.microweber.org/demo/module/ in microweber/microweber CVE-2024-43796 express vulnerable to XSS via response.redirect()