CVE-2017-6480

groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php path parameter...

CVE-2017-6480

groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php path parameter...

CVE-2017-6480

CVE-2017-6480 affects groovel/cmsgroovel older than 3.3.7-beta, with a reflected XSS in commons/browser.php (path parameter). The vulnerability allows injection of script code via the path parameter, potentially compromising user sessions or content viewed by victims. Exploitation details (e.g., ...