CVE-2018-14937

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.

• CWE-79

• http://owendarlene.com/stored-xss-my-little-forum/Exploit, Third Party Advisory, URL Repurposed
• http://owendarlene.com/stored-xss-my-little-forum/Exploit, Third Party Advisory, URL Repurposed

Published

Aug 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14930An issue was discovered in the Armor module in Polaris FT In…
• CVE-2018-14931An issue was discovered in the Core and Portal modules in Po…
• CVE-2018-14933upgrade_handle.php on NUUO NVRmini devices allows Remote Com…9.8
• CVE-2018-14934The Bluetooth subsystem on Polycom Trio devices with softwar…
• CVE-2018-14935The Web administration console on Polycom Trio devices with …
• CVE-2018-14936The Add page option in my little forum 2.4.12 allows XSS via…
• CVE-2018-14938An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW …
• CVE-2018-14939The get_app_path function in desktop/unx/source/start.c in L…
• CVE-2018-1494IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.…5.4
• CVE-2018-14940PHPCMS 9 allows remote attackers to cause a denial of servic…
• CVE-2018-14941Harmonic NSG 9000 devices allow remote authenticated users t…
• CVE-2018-14942Harmonic NSG 9000 devices allow remote authenticated users t…