Foreman · Foreman · CVE-2018-14664
**Name of the Vulnerable Software and Affected Versions**
Foreman versions 1.18 and later
**Description**
A stored cross-site scripting issue exists due to improperly escaped HTML code in the breadcrumbs bar, allowing a user with permissions to edit the attribute used in the breadcrumbs bar to store code that will be executed on the client side.
**Recommendations**
For Foreman version 1.18, update to a version that includes a fix for this issue, as no specific workaround is provided for this version.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.