CVE-2018-17314

On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

• CWE-79

• http://packetstormsecurity.com/files/149501/RICOH-MP-305-Printer-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/149501/RICOH-MP-305-Printer-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry

Published

Sep 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17309On the RICOH MP C406Z printer, HTML Injection and Stored XSS…
• CVE-2018-1731IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.…4.8
• CVE-2018-17310On the RICOH MP C1803 JPN printer, HTML Injection and Stored…
• CVE-2018-17311On the RICOH MP C6503 Plus printer, HTML Injection and Store…
• CVE-2018-17312On the RICOH Aficio MP 301 printer, HTML Injection and Store…
• CVE-2018-17313On the RICOH MP C307 printer, HTML Injection and Stored XSS …
• CVE-2018-17315On the RICOH MP C2003 printer, HTML Injection and Stored XSS…
• CVE-2018-17316On the RICOH MP C6003 printer, HTML Injection and Stored XSS…
• CVE-2018-17317FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote …
• CVE-2018-1732IBM QRadar Advisor with Watson 1.14.0 discloses sensitive in…5.3
• CVE-2018-17320An issue was discovered in UCMS 1.4.6. aaddpost.php has stor…
• CVE-2018-17321An issue was discovered in SeaCMS 6.64. XSS exists in admin_…