CVE-2017-8763

Cross-site scripting XSS vulnerability in modules/Base/Box/checkfornewversion.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter...

CVE-2017-8763

CVE-2017-8763 affects Telaxus EPESI, specifically versions <= 1.8.2, where an XSS flaw exists in modules/Base/Box/check_for_new_version.php due to a crafted URI lacking the cid parameter. Reported impacts indicate remote injection of arbitrary script/HTML. OpenVAS notes EPESI