Lucene search
PRIOn knowledge basePRION:CVE-2017-15284HistoryOct 12, 2017 - 8:29 a.m.
Cross site scripting
2017-10-1208:29:00
PRIOn knowledge base
www.prio-n.com
4
0.003 Low
EPSS
Percentile
69.4%
Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context of the Admin account.
Related
packetstorm
packetstorm
OctoberCMS 1.0.425 Cross Site Scripting
2017-10-12 00:00:00
osv
osv
CVE-2017-15284
2017-10-12 08:29:00
cve
cve
CVE-2017-15284
2017-10-12 08:29:00
zdt
zdt
OctoberCMS 1.0.425 Cross Site Scripting Vulnerability
2017-10-12 00:00:00
exploitpack
exploitpack
OctoberCMS 1.0.425 (Build 425) - Cross-Site Scripting
2017-10-12 00:00:00
nvd
nvd
CVE-2017-15284
2017-10-12 08:29:00
cvelist
cvelist
CVE-2017-15284
2017-10-12 08:00:00
exploitdb
exploitdb
OctoberCMS 1.0.425 (Build 425) - Cross-Site Scripting
2017-10-12 00:00:00