Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-25053

22
FAUCET Score

CVE-2018-25053 is a Cross-Site Scripting (XSS) vulnerability found in moappi Json2html versions up to 1.1.x, specifically within the json2html.js file. This vulnerability allows for remote attacks, where an attacker could inject malicious scripts into web pages viewed by users. The vulnerability is rated as Medium severity with a CVSS score of 6.1, indicating that it can be exploited over a network with low attack complexity, requiring user interaction, and potentially leading to low impact on confidentiality and integrity. There is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules. The vulnerability has received minimal community discussion and media coverage, suggesting low awareness or perceived threat.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.2.0CPE matchmatch criteria
cpe:2.3:a:json2html:json2html:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.3MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.53%
Probability of exploitation in next 30 days
EPSS Percentile
41.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0053 is in the 44th percentile among its peer group of 26,209 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
npmpatch availablevia ghsa
Product: node-json2htmlFixed in: 1.2.0

Vendor Advisories (1)

npmGHSA-79mp-cxp4-9p6rmedium

Json2html vulnerable to cross-site scripting

Dec 28, 2022

References

github.com / moappi/json2html/commit/2d3d24d971b19a8ed1fb823596300b9835d55801
PatchThird Party Advisory
github.com / moappi/json2html/releases/tag/1.2.0
Release NotesThird Party Advisory
vuldb.com
Third Party Advisory
vuldb.com
Third Party Advisory