Description
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.
References (2)
Core 2
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/omeka/Omeka/commit/ba841892116544847d76d3838781c9708cb92221
Third Party Advisory x_refsource_misc
https://github.com/omeka/Omeka/releases/tag/v2.6.1
Scores
CVSS v3
6.1
EPSS
0.0024
EPSS Percentile
47.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
omeka/omeka
< 2.6.1
Published
Jul 07, 2018
Tracked Since
Feb 18, 2026