CVE-2017-2169: XSS
Published May 22, 2017
·Updated
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Maxbuttons Project Maxbuttons Wordpress<=6.18
Maxbuttons Project Maxbuttons Wordpress<=6.18
Event History
May 22, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2169?
CVE-2017-2169 is considered a medium severity cross-site scripting vulnerability.
2
How do I fix CVE-2017-2169?
To fix CVE-2017-2169, update MaxButtons and MaxButtons Pro to version 6.19 or later.
3
What applications are affected by CVE-2017-2169?
CVE-2017-2169 affects MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 used in WordPress.
4
What is the impact of CVE-2017-2169?
The impact of CVE-2017-2169 is that it allows remote attackers to inject arbitrary web scripts or HTML into the application.
5
Are there any known exploitation vectors for CVE-2017-2169?
The specifics of the exploitation vectors for CVE-2017-2169 are unspecified, but it relates to cross-site scripting challenges.