CVE-2018-18692: Semcosoft

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form.

Affected products

• Semcosoft Semcosoft: version 5.3 only

Published 2019-02-23. Last modified 2026-06-17.