CVE-2017-1000213

2017-11-1701:29:00

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

WBCE v1.1.11 is vulnerable to reflected XSS via the “begriff” POST parameter in /admin/admintools/tool.php?tool=user_search

CPENameOperatorVersion
wbce_cmseq1.0.0-beta.1
wbce_cmseq1.1.1
wbce_cmseq1.1.2
wbce_cmseq1.1.10
wbce_cmseq1.1.4
wbce_cmseq1.1.8
wbce_cmseq1.1.9
wbce_cmseq1.0.0
wbce_cmseq1.0.0-beta.2
wbce_cmseq1.1.0

Name	Operator	Version
wbce_cms	eq	1.0.0-beta.1
wbce_cms	eq	1.1.1
wbce_cms	eq	1.1.2
wbce_cms	eq	1.1.10
wbce_cms	eq	1.1.4
wbce_cms	eq	1.1.8
wbce_cms	eq	1.1.9
wbce_cms	eq	1.0.0
wbce_cms	eq	1.0.0-beta.2
wbce_cms	eq	1.1.0