CVE-2017-17911

packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503...

CVE-2017-17911

The CVE-2017-17911 entry concerns Archon CMS, affected with XSS in packages/core/contact.php (Archon 3.21 rev-1) via the referer parameter in an index.php?p=core/contact request. The root cause is a cross‑site scripting flaw in the referer handling, potentially affecting users who view or interac...