What’s Vulnerable › Vulnerabilities

CVE-2018-14527

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-07-23 · updated 2026-06-17
• Weakness: CWE-79

Description

Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example, it considers SCRIPT and IMG elements, but does not consider VIDEO elements).

Affected products

• Xiao5Ucompany Project Xiao5Ucompany: 1.7

References

• https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/2018/Xiao5uCompany_1.7_xss.doc
• https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/2018/Xiao5uCompany_1.7_xss.doc

Get alerted when CVE-2018-14527 or the next vulnerability affects your stack