tags.","inLanguage":"en-US","identifier":"CVE-2018-17090","datePublished":"2018-09-16T21:29:00.267","dateModified":"2026-06-17T01:45:20.843","about":{"@type":"Thing","name":"CVE-2018-17090","identifier":"CVE-2018-17090"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2018 17090","item":"https://gotrooted.org/cve/CVE-2018-17090"}]}]}

VULNERABILITY INTELLIGENCE

CVE-2018-17090

CVSS score5.4 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2018-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

An issue was discovered in DonLinkage 6.6.8. The modules /pages/bazy/bazy_adresow.php and /pages/proxy/add.php are vulnerable to stored XSS that can be triggered by closing <textarea> followed by <script></script> tags.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references