CVE-2017-9621

2017-06-1421:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

JSON

Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) original or (2) new parameter.

CPENameOperatorVersion
epesicrmeq1.6.4
epesicrmeq1.7.2
epesicrmeq1.6.0
epesicrmeq1.5.6.1
epesicrmeq1.6.5
epesicrmeq1.7.0
epesicrmeq1.8.1.1
epesicrmeq1.5.5
epesicrmeq1.6.2.1
epesicrmeq1.6.2

Name	Operator	Version
epesicrm	eq	1.6.4
epesicrm	eq	1.7.2
epesicrm	eq	1.6.0
epesicrm	eq	1.5.6.1
epesicrm	eq	1.6.5
epesicrm	eq	1.7.0
epesicrm	eq	1.8.1.1
epesicrm	eq	1.5.5
epesicrm	eq	1.6.2.1
epesicrm	eq	1.6.2