CVE-2018-13849 edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on preg_replace.
MediumCVSS 6.1
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on preg_replace.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| instagram-clone project instagram-clone | <= 2018-04-23 | No fix listed |
References
- cxsecurity.com exploit third-party-advisory
- 45003 exploit third-party-advisory vdb-entry