{"id":"CVE-2018-5479","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5479","generatedAt":"2026-10-28T22:41:46.841Z","title":"FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks.","description":"FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed.","published":"2018-01-15T16:29:00.000Z","lastModified":"2026-06-17T02:00:23.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":6.1,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["foxsash/imghosting"],"epss":{"score":0.02069,"percentile":0.81316,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2018-01-15","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":43567,"kind":"exploit","title":"ImgHosting 1.5 - Cross-Site Scripting","url":"https://www.exploit-db.com/exploits/43567","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/43567.txt","file":"exploits/php/webapps/43567.txt","published":"2018-01-15","added":"2018-01-15","updated":"2018-01-15","author":"Dennis Veninga","type":"webapps","platform":"php","port":null,"verified":false,"codes":["CVE-2018-5479"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB, so the technical barrier is gone even though the severity is medium and EPSS is 2.1%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"https://www.exploit-db.com/exploits/43567/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/43567/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5479","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}