CVE-2018-15679 An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting.
MediumCVSS 6.1
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| btiteam xbtit | = 2.5.4 | No fix listed |
References
- github.com third-party-advisory
- rastating.github.io exploit patch third-party-advisory