CVE-2017-2124

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2124

The CVE-2017-2124 entry affects OneThird CMS v1.73 Heaven’s Door and earlier. A cross-site scripting vulnerability exists in contact.php, allowing remote attackers to inject arbitrary web script or HTML via a crafted inquiry form submission. The root cause is improper handling in the inquiry form...