What’s Vulnerable › Vulnerabilities

CVE-2018-18029

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-10-09 · updated 2026-06-17
• Weakness: CWE-79

Description

Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.

Affected products

• Naviwebs S.C. Navigate CMS: all versions

References

• https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866
• https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms
• https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866
• https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms

Get alerted when CVE-2018-18029 or the next vulnerability affects your stack