CVE-2018-18307

A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field. NOTE: the vendor's position is that this is not a valid report: "The researcher used an authorized cookie to perform the request to a password-protected route. Without that session cookie, the request would have been rejected as unauthorized."

• CWE-79

• http://packetstormsecurity.com/files/149787/Alchemy-CMS-4.1-Stable-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/base_controller.rb#L15
• https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/pictures_controller.rb#L5
• https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/resources_controller.rb#L21
• https://www.exploit-db.com/exploits/45601
• http://packetstormsecurity.com/files/149787/Alchemy-CMS-4.1-Stable-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/base_controller.rb#L15
• https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/pictures_controller.rb#L5
• https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/resources_controller.rb#L21

Published

Oct 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18288CrushFTP through 8.3.0 is vulnerable to credentials theft vi…6.1
• CVE-2018-18289The MESILAT Zabbix plugin before 1.1.15 for Atlassian Conflu…
• CVE-2018-1829IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable…5.4
• CVE-2018-18290An issue was discovered in nc-cms through 2017-03-10. index.…
• CVE-2018-18291A cross site scripting (XSS) vulnerability on ASUS RT-AC58U …
• CVE-2018-18296MetInfo 6.1.2 has XSS via the /admin/index.php bigclass para…
• CVE-2018-18308In the 4.2.23 version of BigTree, a Stored XSS vulnerability…
• CVE-2018-18309An issue was discovered in the Binary File Descriptor (BFD) …
• CVE-2018-18310An invalid memory address dereference was discovered in dwfl…5.5
• CVE-2018-18311Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer ove…
• CVE-2018-18312Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer ove…
• CVE-2018-18313Perl before 5.26.3 has a buffer over-read via a crafted regu…