CVE-2018-7746 An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is trigge...
HighCVSS 8.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cobub razor | = 0.7.2 | No fix listed |
References
- github.com exploit vendor-advisory
- 44416 exploit third-party-advisory vdb-entry