Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-15736
HistoryOct 22, 2017 - 12:00 a.m.

CVE-2017-15736

2017-10-2200:00:00
ubuntu.com
ubuntu.com
5

0.002 Low

EPSS

Percentile

55.4%

Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7
allows remote attackers to inject arbitrary web script or HTML via a
crafted string, as demonstrated by a PGP field, related to
prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchspip< 3.1.4-4~deb9u3build0.18.04.1UNKNOWN
ubuntu16.04noarchspip< anyUNKNOWN

0.002 Low

EPSS

Percentile

55.4%