Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 22/05/2018 Updated: 26/06/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

An XSS issue exists in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.

Vulnerable Product	Search on Vulmon	Subscribe to Product
frappe erpnext 11.x.x-develop_b1036e5

# Exploit Title: ERPnext 11xx - Cross-Site Scripting # Date: 2018-05-10 # Exploit Author: Veerababu Penugonda # Vendor Homepage: erpnextcom/ # Software Link: demoerpnextcom/ # Version: Frappe ERPNext v11xx-develop # Tested on: Mozilla Firefox quantum 601 , Ubuntu OS # CVE : CVE-2018-11339 # 1 Description: # demoer ...

ERPnext version 11xx suffers from a cross site scripting vulnerability ...

CWE-79 https://github.com/frappe/frappe/issues/5546 https://discuss.erpnext.com/t/stored-xss-in-erpnext-demo-website/36587 https://www.exploit-db.com/exploits/44691/https://nvd.nist.gov https://www.exploit-db.com/exploits/44691/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-11339

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect