22 matches found
CVE-2017-6877: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web script...
6.1CVSS5.9AI score0.00981EPSS
SaveExploits0References2
PT-2017-17390
Name of the Vulnerable Software and Affected Versions Lutim versions 0.7.1 and earlier Description A cross-site scripting XSS issue exists in the handling of SVG files, allowing remote attackers to inject arbitrary web script. Recommendations For versions 0.7.1 and earlier, update to a version...
6.1CVSS0.00981EPSS
SaveExploits0References5
20