CVE-2018-11628

보통 6.1CVE-2018-11628 · Published 01/06/2018 · updated 17/06/2026

요약

CVE-2018-11628은(는) ems master calendar (emssoftware)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 3.4%, 전체 취약점의 88.9%보다 높음.
조치: 8.0.0.201805210 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
ems master calendar emssoftware	`< 8.0.0.201805210`	`8.0.0.201805210`

Description

Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malicious attackers to send a crafted URL for XSS.

References

securityfocus.com/bid/104428 · Third Party Advisory
docs.emssoftware.com/Content/V44.1_ReleaseNotes.htm · Release Notes
gist.github.com/barrett092/c70752ca6960b8b9616a03006f291a28 · Third Party Advisory
exploit-db.com/exploits/44831 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free