CVE-2018-1000868

Name: CVE-2018-1000868
Creator: NVD / NIST
Published: 2018-12-20T17:29:00.643+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.63%

Last modified Jun 17, 2026

CVE-2018-1000868 is a vulnerability of currently unknown severity. WeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in user_login.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must click a malicous link. EPSS estimates a 1.63% chance of exploitation in the next 30 days.

Description

WeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in user_login.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must click a malicous link. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.

Metrics

EPSS Probability

1.63%

73.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Webidsupport	Webid	<= 1.2.2

References

http://bugs.webidsupport.com/view.php?id=648Issue Tracking, Release Notes, Vendor Advisory
https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7fPatch
https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txtExploit, Third Party Advisory
http://bugs.webidsupport.com/view.php?id=648Issue Tracking, Release Notes, Vendor Advisory
https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7fPatch
https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txtExploit, Third Party Advisory

Timeline

Published: Dec 20, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-1000868?

How severe is CVE-2018-1000868?

Severity scoring for CVE-2018-1000868 is pending analysis. The EPSS model estimates a 1.63% probability of exploitation in the next 30 days.

How do I fix CVE-2018-1000868?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-1000868?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST