4 matches found
CVE-2017-16841
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...
6.1CVSS6AI score0.01438EPSS
SaveExploits4References2
Design/Logic Flaw
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...
4.3CVSS5.9AI score0.01438EPSS
SaveExploits4References2Affected Software1
CVE-2017-16841
LanSweeper 6.0.100.75 is affected by CVE-2017-16841: an XSS vulnerability via the description parameter to /Calendar/CalendarActions.aspx. The issue enables injection that can be reflected in the user’s browser; CVSS v2 base score 4.3 (MEDIUM) and CVSS v3 base score 6.1 (MEDIUM) with network acce...
6.1CVSS5.9AI score0.01438EPSS
SaveExploits4References2Affected Software1
20