4 matches found
SUSE CVE-2017-9332
The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...
CVE-2017-9332
The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...
Design/Logic Flaw
The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...
PT-2017-18848
Name of the Vulnerable Software and Affected Versions PivotX version 2.3.11 Description The issue concerns the smarty self function in PivotX, which mishandles the URI. This allows for cross-site scripting XSS attacks via vectors involving quotes in the self Smarty tag. Recommendations For PivotX...