CVE-2017-17949

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

CVE-2017-17949

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

CVE-2017-17949

CVE-2017-17949 applies to Cells Blog 3.5. The vulnerability is a Cross-Site Scripting (XSS) flaw exploited via the pub_readpost.php fmid parameter. The connected sources confirm XSS in Cells Blog 3.5 and describe the vulnerability vector, without providing a specific patch/version, workarounds, o...