Lucene search

K
osvGoogleOSV:CVE-2017-10970
HistoryJul 06, 2017 - 11:29 a.m.

CVE-2017-10970

2017-07-0611:29:00
Google
osv.dev
5

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php.

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%