CVE-2018-15917: Jorani Project Jorani

Medium severity, CVSS 5.4. EPSS: 5.9% chance of exploitation in the next 30 days.

Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to session/language.

Affected products

• Jorani Project Jorani: version 0.6.5 only

Published 2018-09-05. Last modified 2026-06-17.