CVE-2017-12788: XSS

Published May 9, 2019

Updated

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows remote attackers to inject arbitrary web script or HTML via the (1) class1 parameter or the (2) anyid parameter.

Affected Software

1 affected component

Metinfo Metinfo=5.3.18

Event History

May 9, 2019

CVE Published

via MITRE·02:54 PM

Data Sourced

via MITRE·02:54 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-12788?

The severity of CVE-2017-12788 is medium with a CVSS score of 6.1.

What is the affected software version for CVE-2017-12788?

The affected software version for CVE-2017-12788 is Metinfo 5.3.18.

How does CVE-2017-12788 impact users?

CVE-2017-12788 allows remote attackers to inject arbitrary web script or HTML, posing a risk of cross-site scripting (XSS) attacks.

Are there any known fixes for CVE-2017-12788?

There are currently no known fixes for CVE-2017-12788. It is recommended to upgrade to a newer version of Metinfo when available.

Is there any additional information available about CVE-2017-12788?

Yes, you can find additional information about CVE-2017-12788 at the following link: [GitHub - MetInfo5.3](https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md)