CVE-2018-14527

MEDIUM 6.1CVE-2018-14527 · Published 23/07/2018 · updated 17/06/2026

In short

CVE-2018-14527 is a MEDIUM (CVSS 6.1) vulnerability affecting xiao5ucompany (xiao5ucompany project).
Chance of exploitation in the next 30 days (EPSS): 0.68%, higher than 52.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xiao5ucompany xiao5ucompany_project	`= 1.7`	No fix yet

Description

Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example, it considers SCRIPT and IMG elements, but does not consider VIDEO elements).

References

WhiteRabbitc/WhiteRabbitc.github.io · Exploit

More vulnerabilities in xiao5ucompany

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free