CVE-2017-9289

2017-05-2917:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.2%

Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php (edit parameter).

CPENameOperatorVersion
noteeqV1.1.1
noteeqV1.1.0
noteeqV1.0.0b2
noteeqV1.0.0b1
noteeq1.0.0
noteeqV1.2.0
noteeqV1.0.0b3

Name	Operator	Version
note	eq	V1.1.1
note	eq	V1.1.0
note	eq	V1.0.0b2
note	eq	V1.0.0b1
note	eq	1.0.0
note	eq	V1.2.0
note	eq	V1.0.0b3

References

github.com/bramkorsten/Note/issues/11