CVE-2018-20418

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.mdRelease Notes, Third Party Advisory
https://github.com/rdincel1/Craft-CMS-3.0.25---Cross-Site-ScriptingExploit, Third Party Advisory
https://www.exploit-db.com/exploits/46054/Exploit, Third Party Advisory, VDB Entry
https://www.raifberkaydincel.com/craft-cms-3-0-25-cross-site-scripting-vulnerability.htmlExploit, Third Party Advisory
https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.mdRelease Notes, Third Party Advisory
https://github.com/rdincel1/Craft-CMS-3.0.25---Cross-Site-ScriptingExploit, Third Party Advisory
https://www.exploit-db.com/exploits/46054/Exploit, Third Party Advisory, VDB Entry
https://www.raifberkaydincel.com/craft-cms-3-0-25-cross-site-scripting-vulnerability.htmlExploit, Third Party Advisory

Timeline

Published: Dec 24, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-204198.8DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.CVE-2018-204204.9In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the targe CVE-2018-204217.5Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array CVE-2018-204228.1Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common CVE-2018-204238.1Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-exist CVE-2018-204245.9Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unb CVE-2018-204258.8libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.CVE-2018-204268.8libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.CVE-2018-204278.8libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.CVE-2018-204288.8libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874 CVE-2018-204298.8libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 a CVE-2018-204306.5GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related