CVE-2018-20418: Cross-site Scripting

December 24, 2018 (updated March 16, 2019)

Craft CMS allows XSS by saving a new title from the console tab.

References

nvd.nist.gov/vuln/detail/CVE-2018-20418
www.exploit-db.com/exploits/46054/

Detect and mitigate CVE-2018-20418 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →