CVE-2017-1000465: XSS

Published Jan 9, 2018

Updated

Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code.

Affected Software

1 affected component

Sulu Sulu-standard=1.6.6

Event History

Jan 9, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the vulnerability ID of the cross-site scripting vulnerability in Sulu-standard version 1.6.6?

The vulnerability ID of the cross-site scripting vulnerability in Sulu-standard version 1.6.6 is CVE-2017-1000465.

How does the stored cross-site scripting vulnerability in Sulu-standard version 1.6.6 occur?

The stored cross-site scripting vulnerability in Sulu-standard version 1.6.6 occurs within the page creation page.

What is the potential impact of the stored cross-site scripting vulnerability in Sulu-standard version 1.6.6?

The stored cross-site scripting vulnerability in Sulu-standard version 1.6.6 can result in disruption of service and execution of JavaScript code.

What is the severity rating of the stored cross-site scripting vulnerability in Sulu-standard version 1.6.6?

The severity rating of the stored cross-site scripting vulnerability in Sulu-standard version 1.6.6 is medium with a severity value of 5.4 (out of 10).

How can I fix the stored cross-site scripting vulnerability in Sulu-standard version 1.6.6?

To fix the stored cross-site scripting vulnerability in Sulu-standard version 1.6.6, you should update to a version that is not affected by the vulnerability.