CVE-2018-10298

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-04-22 · updated 2026-06-17
Weakness: CWE-79

Description

Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.

Affected products

Discuz! Discuzx: through x3.4

References

https://laworigin.github.io/2018/04/22/Discuz-x-portal-Stored-XSS/
https://laworigin.github.io/2018/04/22/Discuz-x-portal-Stored-XSS/

Get alerted when CVE-2018-10298 or the next vulnerability affects your stack