CVE-2017-7205

2017-03-2106:59:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

JSON

A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data (a) passed to the “GamePanelX-V3-master/ajax/ajax.php” URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

CPENameOperatorVersion
gamepanelx-v3eq3.0.12

CPE	Name	Operator	Version
	gamepanelx-v3	eq	3.0.12

References

www.securityfocus.com/bid/97003

github.com/devryan/GamePanelX-V3/issues/161