CVE-2018-16519

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets.

• CWE-79

• http://packetstormsecurity.com/files/151467/COYO-9.0.8-10.0.11-12.0.4-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/Feb/0Exploit, Mailing List, Third Party Advisory
• https://www.coyoapp.de/en/blogVendor Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-032.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/151467/COYO-9.0.8-10.0.11-12.0.4-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/Feb/0Exploit, Mailing List, Third Party Advisory
• https://www.coyoapp.de/en/blogVendor Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-032.txtExploit, Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16513In Artifex Ghostscript before 9.24, attackers able to supply…
• CVE-2018-16514A cross-site scripting (XSS) vulnerability in the View Filte…
• CVE-2018-16515Matrix Synapse before 0.33.3.1 allows remote attackers to sp…
• CVE-2018-16516helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a craf…
• CVE-2018-16517asm/labels.c in Netwide Assembler (NASM) is prone to NULL Po…5.5
• CVE-2018-16518A directory traversal vulnerability with remote code executi…
• CVE-2018-1652IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 thro…6.2
• CVE-2018-16521An XML External Entity (XXE) vulnerability exists in HTML Fo…
• CVE-2018-16522Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an unin…
• CVE-2018-16523Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS u…
• CVE-2018-16524Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS u…
• CVE-2018-16525Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS u…