CVE-2017-6812

2017-03-1106:59:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter).

CPENameOperatorVersion
mangoswebv4eq4.0.8
mangoswebv4eq4.0.6
mangoswebv4eq4.0.0
mangoswebv4eq4.0.4
mangoswebv4eq4.0.2

Name	Operator	Version
mangoswebv4	eq	4.0.8
mangoswebv4	eq	4.0.6
mangoswebv4	eq	4.0.0
mangoswebv4	eq	4.0.4
mangoswebv4	eq	4.0.2

References

www.securityfocus.com/bid/96939

github.com/paintballrefjosh/MaNGOSWebV4/issues/17