CVE-2018-20837

Description

References

• Typesetter/Typesetter commit fd637e2 · Patch
• netsparker.com/web-applications-advisories/ns-18-026-reflected-cross-site-scripting-in-typesetter · Exploit

typesetter의 다른 취약점

• CVE-2025-71166보통 5.4Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface…
• CVE-2025-71165보통 5.4Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface…
• CVE-2025-71164보통 5.4Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Editing component. The i…
• CVE-2022-25523높음 8.8TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request.
• CVE-2020-19511보통 6.1Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,