CVE-2018-16235

MEDIUM 6.1CVE-2018-16235 · Published 23/10/2018 · updated 17/06/2026

In short

CVE-2018-16235 is a MEDIUM (CVSS 6.1) vulnerability affecting community (telligent).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 59.0% of all vulnerabilities.
Fix: update to 10.1.10.11792, 10.2.3.4725, 9.2.10.11796 or later.

Package	Affected versions	Patched versions
community telligent	`= 6.0≥ 10.1, < 10.1.10.11792≥ 10.2, < 10.2.3.4725≥ 7.0, ≤ 7.6≥ 8.0, ≤ 8.5≥ 9.0, < 9.2.10.11796`	`10.1.10.1179210.2.3.47259.2.10.11796`

Description

Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget.

References

community.telligent.com/community/10/w/user-documentation/61996/release-notes · Release Notes
community.telligent.com/community/9/w/user-documentation/52752/release-notes · Release Notes
horizonsecurity.it/lang_EN/advisories · Third Party Advisory

More vulnerabilities in community

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free