CVE-2017-17792

2017-12-2009:29:01

Google

osv.dev

0.001 Low

EPSS

Percentile

47.5%

JSON

Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitrary JavaScript via a comment.

CPENameOperatorVersion
blogotexteq3.7.0
blogotexteq3.7.2
blogotexteq3.7.6
blogotexteq3.7.5
blogotexteq3.0.0
blogotexteq3.4.8
blogotexteq3.0.0-pre
blogotexteq3.1.0
blogotexteq3.7.3
blogotexteq3.4.7

Name	Operator	Version
blogotext	eq	3.7.0
blogotext	eq	3.7.2
blogotext	eq	3.7.6
blogotext	eq	3.7.5
blogotext	eq	3.0.0
blogotext	eq	3.4.8
blogotext	eq	3.0.0-pre
blogotext	eq	3.1.0
blogotext	eq	3.7.3
blogotext	eq	3.4.7