CVE-2017-7386

2017-04-0100:59:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter).

CPENameOperatorVersion
symetrieeq.0.9.5
symetrieeq.0.9.3
symetrieeq.0.9.2
symetrieeq.0.9.6
symetrieeq.0.9.1
symetrieeq.0.9.4

Name	Operator	Version
symetrie	eq	.0.9.5
symetrie	eq	.0.9.3
symetrie	eq	.0.9.2
symetrie	eq	.0.9.6
symetrie	eq	.0.9.1
symetrie	eq	.0.9.4

References

www.securityfocus.com/bid/98082

github.com/citymont/symetrie/issues/3