PT-2018-18730 · Xiuno · Xiuno Bbs

Sebao · Published 2018-03-22 · Updated 2018-04-18 · CVE-2018-8942

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Xiuno BBS version 4.0.0

Description The issue is related to a Cross-Site Scripting (XSS) problem. It affects the sitename parameter in the admin page.

Recommendations For Xiuno BBS version 4.0.0, avoid using the sitename parameter in the admin page until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-8942

Affected Products

Xiuno Bbs

References · 3

• https://osv.dev/vulnerability/CVE-2018-8942 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8942 · Security Note
• https://seebug.org/vuldb/ssvid-97103 · Note