Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-c4w5-q88d-z3hg
Vulnerability ID VCID-c4w5-q88d-z3hg
Aliases CVE-2018-10059
Summary Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to determine a page name.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
epss 0.00287 https://api.first.org/data/v1/epss?cve=CVE-2018-10059
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2018-10059
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10059
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.52027
EPSS Score 0.00287
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:32:56.484129+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0