The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...
6.1CVSS6.1AI score
SaveExploits0References1
Prion•added 2017/06/06 2:29 p.m.•17 views
Design/Logic Flaw
The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...
