medium6.1
CVE-2018-12047
xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.
Impact
xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ximdex | Ximdex | Version 4.0 |