3 matches found
Design/Logic Flaw
Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php...
3.5CVSS5.1AI score0.00513EPSS
SaveExploits1References1Affected Software1
CVE-2017-17889
Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php...
5.2AI score0.00513EPSS
SaveExploits1References1
CVE-2017-17889: Improper Neutralization of Input During Web Page Generation
Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php...
5.4CVSS5.9AI score0.00513EPSS
SaveExploits1References2
20