{"id":"CVE-2019-6018","details":"Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier (NetCommons3.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","modified":"2026-07-08T16:08:12.409621Z","published":"2019-12-26T16:15:11.497Z","references":[{"type":"ADVISORY","url":"http://jvn.jp/en/jp/JVN74530672/index.html"},{"type":"ADVISORY","url":"https://www.netcommons.org/blogs/blog_entries/view/6/7b40ca16fc8358a57d0e178c931c0027?frame_id=13"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/netcommons3/netcommons3","events":[{"introduced":"102bec625e597cd6dbfd53b6730198eafed02553"},{"last_affected":"8db03b69af5fa8ad4bf65858feeec279edccf195"}],"database_specific":{"extracted_events":[{"introduced":"3.0.0"},{"last_affected":"3.2.2"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:netcommons:netcommons:*:*:*:*:*:*:*:*"}}],"versions":["3.2.2","3.2.1.1","3.2.1","3.2.0","3.1.10","3.1.9","3.1.8","3.1.7","3.1.6","3.1.5","3.1.4","3.1.3","3.1.2","3.1.0","3.0.1","3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6018.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}