CVE-2018-5124

6.1 mediumEPSS 1.0%

Medium (6.1) in mozilla firefox. EPSS 1.0% chance of exploitation in the next 30 days.

Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1.

Severity

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-04-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19