CVE-2017-17911

The CVE-2017-17911 entry concerns Archon CMS, affected with XSS in packages/core/contact.php (Archon 3.21 rev-1) via the referer parameter in an index.php?p=core/contact request. The root cause is a cross‑site scripting flaw in the referer handling, potentially affecting users who view or interac...