CVE-2017-12139

Publication date

2017-08-02 05:00:00

Family

mitre

State

PUBLISHED

Description

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.