CVE-2018-14777

MEDIUM · CVSS 5.4 EPSS 0.65%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-14777

Severity

MEDIUM

CVSS

5.4

EPSS

0.65%

Original NVD Description

An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html and /index.php?do=addnews URIs) to send a malicious script to unsuspecting Admins or users.