CVE-2018-9282

An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a user's session, or elevate privileges by targeting an administrative user.

• CWE-79

• https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/Exploit, Third Party Advisory
• https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/Exploit, Third Party Advisory

Published

Sep 21, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9274In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_…
• CVE-2018-9275In check_user_token in util.c in the Yubico PAM module (aka …
• CVE-2018-9276An issue was discovered in PRTG Network Monitor before 18.2.…7.2
• CVE-2018-9279An issue was discovered on Eaton UPS 9PX 8000 SP devices. Th…
• CVE-2018-9280An issue was discovered on Eaton UPS 9PX 8000 SP devices. Th…
• CVE-2018-9281An issue was discovered on Eaton UPS 9PX 8000 SP devices. Th…
• CVE-2018-9283An XSS issue was discovered in CremeCRM 1.6.12. It is affect…
• CVE-2018-9284authentication.cgi on D-Link DIR-868L devices with Singapore…9.8
• CVE-2018-9285Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT…
• CVE-2018-9302SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php…
• CVE-2018-9303In Exiv2 0.26, an assertion failure in BigTiffImage::readDat…
• CVE-2018-9304In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in…