CVE-2017-14620

SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-09-30

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Smarterstats (Smartertools)

References

• http://xss.cx/cve/2017/14620/smarterstats.v11-3-6347.html
• https://www.exploit-db.com/exploits/42923/