What’s Vulnerable › Vulnerabilities

CVE-2018-11348

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-04 · updated 2026-06-17
• Weakness: CWE-79

Description

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session.

Affected products

• Yunohost: from 2.7.2 through 2.7.14

References

• https://www.bishopfox.com/news/2018/10/yunohost-2-7-2-to-2-7-14-multiple-vulnerabilities/
• https://www.bishopfox.com/news/2018/10/yunohost-2-7-2-to-2-7-14-multiple-vulnerabilities/

Get alerted when CVE-2018-11348 or the next vulnerability affects your stack