2 matches found
CVE-2017-15948
Perch Content Management System 3.0.3 allows unrestricted file upload with resultant XSS via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account...
4.8CVSS5.7AI score0.00589EPSS
SaveExploits3References1
CVE-2017-15948: Improper Neutralization of Input During Web Page Generation
Perch Content Management System 3.0.3 allows unrestricted file upload with resultant XSS via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account...
4.8CVSS5.6AI score0.00589EPSS
SaveExploits3References2
20