Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15736

Опубликовано: 22 окт. 2017
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*
Версия до 3.1.6 (включая)

EPSS

Процентиль: 45%
0.00221
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2017-15736

CVSS3: 6.1
ubuntu
больше 8 лет назад

Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php.

debian логотип

CVE-2017-15736

CVSS3: 6.1
debian
больше 8 лет назад

Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 ...

github логотип

GHSA-mfv3-xjr8-9xpg

CVSS3: 6.1
github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php.

EPSS

Процентиль: 45%
0.00221
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79