What is GHSA-96mh-7xpr-qcgw?

GHSA-96mh-7xpr-qcgw is a security advisory published by GitHub Security Advisories with Medium severity. October CMS - RainLab Blog Plugin XSS

Which CVE IDs does GHSA-96mh-7xpr-qcgw cover?

GHSA-96mh-7xpr-qcgw covers the following CVE IDs: CVE-2018-7198. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-96mh-7xpr-qcgw?

GHSA-96mh-7xpr-qcgw has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-96mh-7xpr-qcgw?

GHSA-96mh-7xpr-qcgw affects 1 product, including: composer/rainlab/blog-plugin:\u003c 1.4.1.

GHSA-96mh-7xpr-qcgwMediumCVSS 6.1

October CMS - RainLab Blog Plugin XSS

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

October 3, 2023

🔗 CVE IDs covered (1)

CVE-2018-7198 →

📋 Description

The RainLab Blog Plugin used in October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.

🎯 Affected products1

composer/rainlab/blog-plugin:< 1.4.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-7198
https://www.exploit-db.com/exploits/44144/
http://securitywarrior9.blogspot.com/2018/02/html-injection-october-cms.html
https://github.com/rainlab/blog-plugin/commit/6ae19a6e16ef3ba730692bc899851342c858bb94
https://github.com/advisories/GHSA-96mh-7xpr-qcgw