EUVD-2017-18267

Malware in sbrugna...

PivotX 'smarty_self' function cross-site scripting vulnerability

PivotX is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. PivotX 2.3.11 version of the modules/modulesmarty.php file of the 'smartyself' function of the cross-site scripting vulnerability , the...

CVE-2017-9332: Improper Neutralization of Input During Web Page Generation

The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...