{"id":"CVE-2018-10326","aliases":["EUVD-2018-2400","GHSA-xj3q-3fqm-9f4h"],"status":"published","title":"PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the...","description":"PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.","severity":{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00542,"percentile":0.45846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2018-05-17T19:00:00Z","modified":"2026-06-17T01:33:51Z","products":[{"vendor":"printeron","product":"printeron"}],"references":[{"url":"https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10326","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10326"},{"url":"https://github.com/advisories/GHSA-xj3q-3fqm-9f4h"}],"sources":{"cve":[{"id":"CVE-2018-10326","description":"PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.","status":"published","published":"2018-05-17T19:00:00Z","modified":"2024-08-05T07:39:07.541Z","updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2018-2400","description":"PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.","status":"published","published":"2018-05-17T19:00:00Z","modified":"2024-08-05T07:39:07Z","updated_at":"2026-11-03T02:39:58.981487Z"}],"ghsa":[{"id":"GHSA-xj3q-3fqm-9f4h","title":"PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the...","description":"PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.","status":"published","published":"2022-05-14T03:17:33Z","modified":"2023-02-02T05:07:35Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:52:32.871435Z"}],"nvd":[{"id":"CVE-2018-10326","description":"PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.","status":"published","published":"2018-05-17T19:29:00.213Z","modified":"2026-06-17T01:33:51.993Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:27.507872Z"}]}}