VulnerabilityModified

CVE-2018-1000848

Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in very low.

MEDIUM 6.1EPSS 0.65%

Does this matter?

Lower severity and a low EPSS score (0.65%). Track it; it rarely justifies an emergency change on its own.

Description

Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in very low. This attack appear to be exploitable via payload onmouseover. This vulnerability appears to have been fixed in 3.1.5 and later.

CVSS 3.0: 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.65% probability · 49th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: wampserver/wampserver
Source: cve@mitre.org

References

http://forum.wampserver.com/read.php?2%2C153491
http://forum.wampserver.com/read.php?2%2C153491

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.