CVE-2017-16843

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-11-16

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Vdv-23 Firmware (Vonage)

References

• https://gh0s7.net/vonage/
• https://www.exploit-db.com/exploits/43150/