2 matches found
Cross site scripting
admin.php in BigTree through 4.2.18 has a Cross-site Scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication aka a...
3.5CVSS5.8AI score0.00784EPSS
SaveExploits0References1Affected Software1
CVE-2017-9548: Improper Neutralization of Input During Web Page Generation
admin.php in BigTree through 4.2.18 has a Cross-site Scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication aka a...
5.4CVSS6.5AI score0.00784EPSS
SaveExploits0References2
20