### [CVE-2018-6659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6659)
![](https://img.shields.io/static/v1?label=Product&message=ePolicy%20Orchestrator%20(ePO)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5.3.25.3.2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Reflected%20Cross-Site%20Scripting%20vulnerability&color=brighgreen)

### Description

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.

### POC

#### Reference
- https://kc.mcafee.com/corporate/index?page=content&id=SB10228
- https://kc.mcafee.com/corporate/index?page=content&id=SB10228

#### Github
No PoCs found on GitHub currently.