medium6.1Public exploit code
CVE-2018-13849
edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Instagram-Clone Script 2.0 - Cross-Site Scripting2018-07-11 · webapps · php
Impact
edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on preg_replace.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Instagram-Clone Project | Instagram-Clone | through 2018-04-23 |