CVE-2018-25064

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in OSM Lab show-me-the-way. It has been rated as problematic. This issue affects some unknown processing of the file js/site.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. The patch is named 4bed3b34dcc01fe6661f39c0e5d2285b340f7cac. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217439.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-250656.1A vulnerability was found in Wikimedia mediawiki-extensions-I18nTags and classified as problematic. This issue affects some unknown processiCVE-2018-250669.8A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulCVE-2018-250677.2A vulnerability, which was classified as critical, was found in JoomGallery up to 3.3.3. This affects an unknown part of the file administraCVE-2018-250689.8A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function creCVE-2018-250699.8A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use oCVE-2018-250709.8A vulnerability has been found in polterguy Phosphorus Five up to 8.2 and classified as critical. This vulnerability affects the function csCVE-2018-250719.8A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log oCVE-2018-250729.8A vulnerability classified as critical has been found in lojban jbovlaste. This affects an unknown part of the file dict/listing.html. The mCVE-2018-250736.1A vulnerability has been found in Newcomer1989 TSN-Ranksystem up to 1.2.6 and classified as problematic. This vulnerability affects the funcCVE-2018-250747.5A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validatoCVE-2018-250759.8A vulnerability classified as critical has been found in karsany OBridge up to 1.3. Affected is the function getAllStandaloneProcedureAndFunCVE-2018-250769.8A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFea
CVE-2018-25064: Medium severity, CVSS 6.1 | Vulnix