CVE-2018-1000998

https://notcve.org/view.php?id=CVE-2018-1000998

FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url. This vulnerability appears to have been fixed in 3.x. FreeBSD CVSweb, en versiones 2.x, contiene una vulnerabilidad Cross-Site Scripting (XSS) en todas las páginas que puede resultar en un impacto limitado: CVSweb es anónimo y de solo lectura. • https://www.kvakil.me/posts/cvsweb • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •