CVE-2018-25054

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the file cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp of the component Search Handler. The manipulation of the argument details leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is d345e6bc7798bd717a583ec7f545ca387819d5c7. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216960.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-250556.1A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an uCVE-2018-250566.1A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pyCVE-2018-250579.8A vulnerability was found in simple_php_link_shortener. It has been classified as critical. Affected is an unknown function of the file indeCVE-2018-250586.1A vulnerability classified as problematic has been found in Twitter-Post-Fetcher up to 17.x. This affects an unknown part of the file js/twiCVE-2018-250595.3A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of thCVE-2018-250607.5A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csCVE-2018-250617.5A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulaCVE-2018-250627.5A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrm_dump_policyCVE-2018-250636.1A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionalCVE-2018-250646.1A vulnerability was found in OSM Lab show-me-the-way. It has been rated as problematic. This issue affects some unknown processing of the fiCVE-2018-250656.1A vulnerability was found in Wikimedia mediawiki-extensions-I18nTags and classified as problematic. This issue affects some unknown processiCVE-2018-250669.8A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipul
CVE-2018-25054: Medium severity, CVSS 5.4 | Vulnix