CVE-2017-12984

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-08-21

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Phpmywind (Phpmywind)

References

• http://www.yuag.org/2016/08/17/phpmywind_5-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/
• https://www.exploit-db.com/exploits/42535/