CVE-2018-13065

ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured

Affected products

Modsecurity

Owasp Modsecurity

= 3.0.0

CVSS 3.0

6.1 MEDIUM

EPSS

1.6% (74th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2018-07-03