CVE-2018-12655: Slims Akasia Project Slims Akasia

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Reflected Cross-Site Scripting (XSS) exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via an admin/modules/circulation/loan_rules.php?keywords= URI, a related issue to CVE-2017-7242.

Affected products

• Slims Akasia Project Slims Akasia: version 8.3.1 only

Published 2018-06-22. Last modified 2026-06-17.