CVE-2018-18692

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-02-23 · updated 2026-06-17
Weakness: CWE-79

Description

A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form.

Affected products

Semcosoft: 5.3

References

https://atomic111.github.io/article/semcosoft-cross-site-scripting
https://atomic111.github.io/article/semcosoft-cross-site-scripting

Get alerted when CVE-2018-18692 or the next vulnerability affects your stack