CVEvulnerability
CVE-2018-10326
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-05-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.
Affected configurations
• printeron printeron 4.1.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10326 Exploit, Third Party Advisory
- https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10326 Exploit, Third Party Advisory