4 matches found
Design/Logic Flaw
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...
CVE-2017-7944
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...
PT-2017-18017
Name of the Vulnerable Software and Affected Versions XOOPS Core version 2.5.8.1 Description The issue is related to unescaped HTML output of an Install DB failure error message in page dbsettings.php, which leads to a cross-site scripting XSS problem. Recommendations For XOOPS Core version...
CVE-2017-7944: Improper Neutralization of Input During Web Page Generation
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in pagedbsettings.php...