CVE-2018-13849

6.1 mediumEPSS 2.3%

Medium (6.1) in instagram-clone project instagram-clone. EPSS 2.3% chance of exploitation in the next 30 days.

edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on preg_replace.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-07-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

instagram-clone_project:instagram-clone

References

https://cxsecurity.com/issue/WLB-2018070095
https://www.exploit-db.com/exploits/45003/
https://cxsecurity.com/issue/WLB-2018070095
https://www.exploit-db.com/exploits/45003/

Check your stack JSON