CVE-2018-10366: User Project User

Medium severity, CVSS 6.1. EPSS: 2.4% chance of exploitation in the next 30 days.

An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field.

Affected products

• User Project User: version 1.4.5 only

Published 2018-04-25. Last modified 2026-06-17.