CVE-2018-10726: Datenstrom Yellow

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS

Affected products

• Datenstrom Yellow: version 0.7.3 only

Published 2018-05-04. Last modified 2026-06-17.