CVE-2018-18717

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Eleanor CMS through 2015-03-19. XSS exists via the ajax.php?direct=admin&file=autocomplete&query=[XSS] URI.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-187187.8An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheetCVE-2018-18725.4IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code inCVE-2018-187204.8An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.CVE-2018-187214.8An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.CVE-2018-187224.8An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.CVE-2018-187234.8An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.CVE-2018-187244.8An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.CVE-2018-187254.8An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.CVE-2018-187264.8An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.CVE-2018-187277.5An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03CVE-2018-187289.8An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote CVE-2018-187299.8An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03
CVE-2018-18717: Medium severity, CVSS 4.8 | Vulnix