CVE-2018-11649: Gethue Hue

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Hue 3.12 has XSS via the /pig/save/ name and script parameters.

Affected products

• Gethue Hue: version 3.12 only

Published 2018-06-01. Last modified 2026-06-17.