CVE-2018-17886

An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a <svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429.

• CWE-79

• https://github.com/Jayl1n/CVE/blob/master/jeesns/jeesns-1.3-xss-filter-bypass.mdExploit, Third Party Advisory
• https://github.com/Jayl1n/CVE/blob/master/jeesns/jeesns-1.3-xss-filter-bypass.mdExploit, Third Party Advisory

Published

Oct 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1788IBM Spectrum Protect Server 7.1 and 8.1 could disclose highl…4.1
• CVE-2018-17880On D-Link DIR-823G 2018-09-19 devices, the GoAhead configura…
• CVE-2018-17881On D-Link DIR-823G 2018-09-19 devices, the GoAhead configura…
• CVE-2018-17882An Integer overflow vulnerability exists in the batchTransfe…
• CVE-2018-17883An issue was discovered in Open Ticket Request System (OTRS)…6.1
• CVE-2018-17884XSS exists in admin/gb-dashboard-widget.php in the Gwolle Gu…
• CVE-2018-17888NUUO CMS all versions 3.1 and prior, The application uses a …
• CVE-2018-17889In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 a…
• CVE-2018-1789IBM API Connect v2018.1.0 through v2018.3.4 could allow an a…8.4
• CVE-2018-17890NUUO CMS all versions 3.1 and prior, The application uses in…9.8
• CVE-2018-17891Carestream Vue RIS, RIS Client Builds: Version 11.2 and prio…
• CVE-2018-17892NUUO CMS all versions 3.1 and prior, The application impleme…