CVE-2018-19782

MEDIO 6.1CVE-2018-19782 · Published 30/01/2019 · updated 17/06/2026

En resumen

CVE-2018-19782 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a freshrss (freshrss).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.4%, mayor que el 91.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
freshrss freshrss	`= 1.11.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) c parameter or (2) a parameter.

References

packetstormsecurity.com/files/150608/FreshRSS-1.11.1-Cross-Site-Scripting.html · Exploit
seclists.org/fulldisclosure/2018/Dec/3 · Exploit
exploit-db.com/exploits/45954 · Exploit
netsparker.com/web-applications-advisories/ns-18-024-multiple-cross-site-scripting-vulnerabilities-in-freshrss · Exploit

Más vulnerabilidades de freshrss

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

freshrss

= 1.11.1

No fix yet

Más vulnerabilidades de freshrss

Ver todo →