CVE-2018-11348

MEDIUM · CVSS 5.4 EPSS 0.62%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-11348

Severity

MEDIUM

CVSS

5.4

EPSS

0.62%

Java

Original NVD Description

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application. By injecting a JavaScript payload, these flaws could be used to manipulate a user's session.