CVE-2017-7247

Gazelle contains an XSS vulnerability (CVE-2017-7247) prior to 2017-03-19 due to insufficient filtering of user-supplied data (torrents, size) passed to Gazelle-master/sections/tools/managers/multiple_freeleech.php. An attacker could execute arbitrary HTML/script in a user’s browser on the vulner...

CVE-2017-7247

Multiple Cross-Site Scripting XSS were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data torrents, size passed to the 'Gazelle-master/sections/tools/managers/multiplefreeleech.php' URL. An attacker could execute arbitrary HTML...