CVE-2017-8897

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the attack vector. This UTF8 Converter vulnerability can easily be used to make a malicious announcement affecting any Invision...

Invision Power Services Community Suite Reflected Cross Site Scripting (CVE-2017-8897)

A reflected cross site scripting vulnerability exists in Invision Power Services Community Suite. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

CVE-2017-8897

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the attack vector. This UTF8 Converter vulnerability can easily be used to make a malicious announcement affecting any Invision...

CVE-2017-8897

CVE-2017-8897 affects Invision Power Services Community Suite (IPS) 4.1.19.2 and earlier, via the IPS UTF8 Converter v1.1.18. It is a pre-auth reflected Cross-Site Scripting (XSS) vulnerability exploitable through admin/convertutf8/index.php?controller=, potentially allowing a crafted announcemen...