cve.bz

CVE-2018-8903

5.4 mediumEPSS 1.6%

Medium (5.4) in open-audit open-audit. EPSS 1.6% chance of exploitation in the next 30 days.

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.

Severity

CVSS 3.0

5.4 medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-11-01)
CWE
CWE-79
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON