CVE-2018-10165

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script or HTML via the userName parameter in the local user creation functionality. This is fixed in version 2.6.1_Windows.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/104094Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/tp-link-eap-controller-multiple-vulnerabilitiesExploit, Third Party Advisory
http://www.securityfocus.com/bid/104094Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/tp-link-eap-controller-multiple-vulnerabilitiesExploit, Third Party Advisory

Timeline

Published: May 3, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-101668.8The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF CVE-2018-101677.5The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a CVE-2018-101688.8TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowin CVE-2018-101699.8ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service e CVE-2018-101709.8NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service es CVE-2018-101719.8Kromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPri CVE-2018-101728.87-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemor CVE-2018-101738.8Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality.CVE-2018-101746.5Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send CVE-2018-101756.5Digital Guardian Management Console 7.1.2.0015 has an XXE issue.CVE-2018-101766.5Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.CVE-2018-101776.5In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage