CVE-2017-10801

phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-07-19

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Phpsocial (Phpsocial)

References

• https://phpsocial.com/page/changelog
• https://www.seekurity.com/blog/advisories/cross-sitescripting-vulnerability-in-phpsocial-aka-phpdolphin-social-network-…