Security Advisory

CVE-2017-17719

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-12-19 20:00:00

Last updated 2024-08-05 20:59:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the result_message parameter to includes/concours_page.php.

← Browse all CVEs View on cve.org ↗