CVE-2017-16514: XSS
Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16514?
CVE-2017-16514 has a medium severity rating due to its potential for persistent stored Cross-Site Scripting vulnerabilities.
How do I fix CVE-2017-16514?
To fix CVE-2017-16514, you should update WebsiteBaker to the latest version that addresses these XSS vulnerabilities.
What are the main affected components related to CVE-2017-16514?
The main affected components related to CVE-2017-16514 are the files /wb/admin/admintools/tool.php and /install/index.php in WebsiteBaker 2.10.0.
What type of attack can be performed using CVE-2017-16514?
CVE-2017-16514 allows attackers to conduct persistent stored Cross-Site Scripting attacks by injecting malicious JavaScript code.
Who is affected by CVE-2017-16514?
Users and administrators of WebsiteBaker version 2.10.0 are affected by CVE-2017-16514 due to the vulnerabilities present in the specified files.