Cross site scripting

2018-01-0318:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

26.2%

JSON

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.

CPENameOperatorVersion
elabftweq1.7.8

CPE	Name	Operator	Version
	elabftw	eq	1.7.8

References

github.com/elabftw/elabftw/issues/531

0.001 Low

EPSS

Percentile

26.2%

JSON

Related for PRION:CVE-2017-1000478