CVE-2018-25055 — FarCry Solr Pro Plugin Search solrProSearch.cfc cross site scripting

Back Back to CVE browser

MEDIUM

FarCry Solr Pro Plugin Search solrProSearch.cfc cross site scripting

Published Dec 28, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.63%

Description

A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file packages/forms/solrProSearch.cfc of the component Search Handler. The manipulation of the argument suggestion leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.6.0 is able to address this issue. The name of the patch is b8f3d61511c9b02b781ec442bfb803cbff8e08d5. It is recommended to upgrade the affected component. The identifier VDB-216961 was assigned to this vulnerability.

Affected products

Vendor n/a Product FarCry Solr Pro Plugin Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -
- Version
  1.1
  Status
  affected
  Constraints
  -
- Version
  1.2
  Status
  affected
  Constraints
  -
- Version
  1.3
  Status
  affected
  Constraints
  -
- Version
  1.4
  Status
  affected
  Constraints
  -
- Version
  1.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

FarCry Solr Pro Plugin

n/a

Version	Status	Constraints
1.0	affected	-
1.1	affected	-
1.2	affected	-
1.3	affected	-
1.4	affected	-
1.5	affected	-

Remediation

No remediation recorded yet.

Metrics

0.63% 0.00630

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00630

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.63% (0.00630)	48.31th	v5 (v2026.06.15)
Jun 15, 2026	0.63% (0.00630)	45.26th	v5 (v2026.06.15)
Mar 17, 2025	0.07% (0.00071)	19.04th	v4 (v2025.03.14)
Dec 12, 2024	0.13% (0.00132)	49.96th	v3 (v2023.03.01)
Jun 9, 2024	0.12% (0.00117)	45.72th	v3 (v2023.03.01)
Jan 30, 2024	0.09% (0.00094)	39.27th	v3 (v2023.03.01)
Jan 4, 2024	0.08% (0.00078)	32.33th	v3 (v2023.03.01)
Nov 28, 2023	0.06% (0.00063)	25.28th	v3 (v2023.03.01)
Mar 7, 2023	0.05% (0.00052)	18.25th	v3 (v2023.03.01)
Mar 6, 2023	1.02% (0.01018)	40.69th	v2 (v2022.01.01)
Jan 7, 2023	1.02% (0.01018)	39.77th	v2 (v2022.01.01)
Dec 29, 2022	0.95% (0.00950)	31.57th	v2 (v2022.01.01)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://github.com/jeffcoughlin/farcrysolrpro/commit/b8f3d61511c9b02b781ec442bfb803cbff8e08d5
patchThird Party Advisory
https://github.com/jeffcoughlin/farcrysolrpro/issues/78
issue-trackingExploitThird Party Advisory
https://github.com/jeffcoughlin/farcrysolrpro/releases/tag/1.6.0
patchRelease NotesThird Party Advisory
https://vuldb.com/?ctiid.216961
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.216961
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://github.com/jeffcoughlin/farcrysolrpro/commit/b8f3d61511c9b02b781ec442bfb803cbff8e08d5		patchThird Party Advisory
https://github.com/jeffcoughlin/farcrysolrpro/issues/78		issue-trackingExploitThird Party Advisory
https://github.com/jeffcoughlin/farcrysolrpro/releases/tag/1.6.0		patchRelease NotesThird Party Advisory
https://vuldb.com/?ctiid.216961		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.216961		vdb-entrytechnical-descriptionThird Party Advisory