CVE-2018-20472

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jun 17, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-204766.1An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php T_id parameter.CVE-2018-204779.8An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php P_no field.CVE-2018-204787.5An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameteCVE-2018-204799.8An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wap_index.php?type=newsinfo S_id parameter.CVE-2018-204809.8An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php P_id parameter.CVE-2018-204816.5XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service CVE-2018-204824.7GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of serCVE-2018-204837.8set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extenCVE-2018-204846.1Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.CVE-2018-204856.1Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.CVE-2018-204866.1MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter.CVE-2018-204878.8An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a
CVE-2018-20472: Medium severity, CVSS 5.4 | Vulnix