CVE-2018-19091

on github

Published

November 7, 2018

Severity

CVSS v3:

5.4 MEDIUM

CVSS v2:

3.5 LOW

Description

tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter.

References

https://github.com/xujeff/tianti/issues/27

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:tianti_project:tianti:2.3:::::::*	n/a	n/a	2.3

External Links

NVD - CVE-2018-19091