CVE-2017-6478

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-03-05

Last modified

2026-02-13

Weaknesses

CWE-79

Affected products

• Mangoswebv4 (Mangoswebv4 Project)

References

• http://www.securityfocus.com/bid/96584
• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-6478.md
• https://github.com/paintballrefjosh/MaNGOSWebV4/issues/15
• https://github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8