CVE-2018-12654

Name of the Vulnerable Software and Affected Versions SLiMS versions 8.3.1

Description A Reflected Cross-Site Scripting issue exists in the Bibliography module. This is due to insufficient input validation in the keywords parameter of the /admin/modules/bibliography/index.php API endpoint.

Recommendations For version 8.3.1, avoid using the keywords parameter in the /admin/modules/bibliography/index.php endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the Bibliography module to minimize the risk of exploitation.