CVE-2018-3735

CVE-2018-3735

Vendor Hackerone

Product bracket-template node module

Weakness CWE-79 · XSS

Published June 7, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3735 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2020-4061 Cross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites CVE-2023-5541 Moodle: xss risk when using csv grade import method CVE-2026-0690 FlatPM – Ad Manager, AdSense and Custom Code <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Post Meta CVE-2021-24815 Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting CVE-2024-3053 Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.29.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via forminator_form Shortcode