Beveiligingsadvies

CVE-2017-9547

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-06-12 06:00:00

Laatst bijgewerkt 2024-08-05 17:11:02

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and entering the Navigation Title or Page Title of a page that is scheduled for future publication (aka a pending page change).

← Alle CVE's bekijken Bekijk op cve.org ↗