CVE-2017-2118
Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Score
- CVSS 3.0 6.1 Medium
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-04-28
- Last modified
- 2024-08-05
- Weaknesses
- CWE-79
Affected products
References
- http://jvn.jp/en/jp/JVN73083905/index.html
- http://www.securityfocus.com/bid/96467
- https://forum.wbce.org/viewtopic.php?id=977
