CVE-2017-17896: XSS
Published Dec 24, 2017
·Updated
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
Affected Software
1 affected component
Basic Job Site Script Project Basic Job Site Script
Event History
Dec 24, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17896?
CVE-2017-17896 is classified as a cross-site scripting (XSS) vulnerability which can lead to serious security risks.
2
How do I fix CVE-2017-17896?
To fix CVE-2017-17896, sanitize and validate the input for the keyword parameter to prevent XSS attacks.
3
What software is affected by CVE-2017-17896?
CVE-2017-17896 affects the Basic Job Site Script.
4
What type of vulnerability is CVE-2017-17896?
CVE-2017-17896 is an XSS vulnerability that allows malicious scripts to be executed in the user's browser.
5
Can CVE-2017-17896 be exploited remotely?
Yes, CVE-2017-17896 can be exploited remotely as it targets user input in the web application.