CVE-2018-13065

ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environ...

Original description

The description as published by the source.

ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory hackings8n.blogspot.com
web exploit-db.com