CVE-2017-16919

2017-11-2108:29:00

Google

osv.dev

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.

CPENameOperatorVersion
maposeq3.1.11
maposeq3.1.5
maposeq2.6.4

Name	Operator	Version
mapos	eq	3.1.11
mapos	eq	3.1.5
mapos	eq	2.6.4

References

github.com/RamonSilva20/mapos/issues/81