CVE-2018-25349
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header, which execute when administrators visit the audit log page.
Risk Assessment
The attack could lead to session hijacking, data theft, or unauthorized actions performed in the context of an administrator.
Recommendation
Update userSpice to the latest version and implement HTTP header filtering.
Other vulnerabilities in userSpice
See all- CVE-2018-25350Critical
userSpice 4.3.24 has a username enumeration vulnerability. An unauthenticated attacker can send POST requests to existingUsernameCheck.php and analyze responses to find existing accounts.
- CVE-2026-48900Medium
An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.
Original NVD description (English source)
userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted requests to the backup.php endpoint with XSS payloads in the X-Forwarded-For header that execute when administrators visit the audit log page.