CVE-2018-18882

MEDIUM · CVSS 5.4 EPSS 0.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-03-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-18882

Severity

MEDIUM

CVSS

5.4

EPSS

0.73%

Original NVD Description

A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface.