WBCE 'begriff' Cross-Site Scripting Vulnerability

WBCE is an open source content management system CMS developed using PHP/MySQL. A cross-site scripting vulnerability exists in WBCE version 1.1.11. A remote attacker can exploit this vulnerability to obtain or tamper with information with the help of the 'begriff' POST parameter in...

CVE-2017-1000213

WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=usersearch...

CVE-2017-1000213

WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=usersearch...

CVE-2017-1000213: Improper Neutralization of Input During Web Page Generation

WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=usersearch...

PT-2017-10911

Name of the Vulnerable Software and Affected Versions WBCE version 1.1.11 Description The issue allows for reflected XSS attacks via the begriff POST parameter in the "/admin/admintools/tool.php?tool=user search" API endpoint. Recommendations For WBCE version 1.1.11, as a temporary workaround,...