{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-28T17:59:11.544","vulnerabilities":[{"cve":{"id":"CVE-2018-1000160","sourceIdentifier":"cve@mitre.org","published":"2018-04-18T19:29:00.393","lastModified":"2026-06-17T01:32:33.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings(26) detailed in the GitHub issue #16."},{"lang":"es","value":"RisingStack protect, en su versión 1.2.0 y anteriores, contiene una vulnerabilidad de Cross Site Scripting (XSS) en la función isXss() en lib/rules/xss.js que puede resultar en que las cadenas XSS peligrosas se validan como seguras. Este ataque parece ser explotable mediante una serie de cadenas XSS (26), detalladas en la publicación número 16 de GitHub."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:risingstack:protect:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"0455B8E2-09DD-4370-8192-0083FF126D39"}]}]}],"references":[{"url":"http://embed.plnkr.co/xHbhB29JWWyMUMeHsLrm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/RisingStack/protect/blob/60b0c91e86686d34e5202419ce9ae7e8dc08edcd/lib/rules/xss.js#L4-L13","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/RisingStack/protect/issues/16","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://embed.plnkr.co/xHbhB29JWWyMUMeHsLrm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/RisingStack/protect/blob/60b0c91e86686d34e5202419ce9ae7e8dc08edcd/lib/rules/xss.js#L4-L13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/RisingStack/protect/issues/16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}