CVE-2018-25064

A vulnerability was found in OSM Lab show-me-the-way. It has been rated as problematic. This issue affects some unknown processing of the file js/site.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. The patch is named 4bed3b34dcc01fe6661f39c0e5d2285b340f7cac. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217439.

• CWE-79
• CWE-79

• https://github.com/osmlab/show-me-the-way/commit/4bed3b34dcc01fe6661f39c0e5d2285b340f7cacPatch
• https://github.com/osmlab/show-me-the-way/pull/57Patch
• https://vuldb.com/?ctiid.217439Permissions Required, Third Party Advisory
• https://vuldb.com/?id.217439Permissions Required, Third Party Advisory
• https://github.com/osmlab/show-me-the-way/commit/4bed3b34dcc01fe6661f39c0e5d2285b340f7cacPatch
• https://github.com/osmlab/show-me-the-way/pull/57Patch
• https://vuldb.com/?ctiid.217439Permissions Required, Third Party Advisory
• https://vuldb.com/?id.217439Permissions Required, Third Party Advisory

Published

Jan 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-25058A vulnerability classified as problematic has been found in …6.1
• CVE-2018-25059A vulnerability was found in pastebinit up to 0.2.2 and clas…5.3
• CVE-2018-25060A vulnerability was found in Macaron csrf and classified as …7.5
• CVE-2018-25061A vulnerability was found in rgb2hex up to 0.1.5. It has bee…7.5
• CVE-2018-25062A vulnerability classified as problematic has been found in …7.5
• CVE-2018-25063A vulnerability classified as problematic was found in Zenos…6.1
• CVE-2018-25065A vulnerability was found in Wikimedia mediawiki-extensions-…6.1
• CVE-2018-25066A vulnerability was found in PeterMu nodebatis up to 2.1.x. …9.8
• CVE-2018-25067A vulnerability, which was classified as critical, was found…7.2
• CVE-2018-25068A vulnerability has been found in devent globalpom-utils up …9.8
• CVE-2018-25069A vulnerability classified as critical has been found in Net…9.8
• CVE-2018-25070A vulnerability has been found in polterguy Phosphorus Five …9.8