CVE-2017-6216

2019-07-0317:15:09

Google

osv.dev

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution

CPENameOperatorVersion
infusionsoft-php-sdkeq2014-02-18
infusionsoft-php-sdkeq2014-03-07
infusionsoft-php-sdkeq2014-04-11
infusionsoft-php-sdkeq2014-05-09
infusionsoft-php-sdkeq2016-10-31
infusionsoft-php-sdkeq2014-09-11

Name	Operator	Version
infusionsoft-php-sdk	eq	2014-02-18
infusionsoft-php-sdk	eq	2014-03-07
infusionsoft-php-sdk	eq	2014-04-11
infusionsoft-php-sdk	eq	2014-05-09
infusionsoft-php-sdk	eq	2016-10-31
infusionsoft-php-sdk	eq	2014-09-11

References

github.com/novaksolutions/infusionsoft-php-sdk/issues/111