CVE-2017-7202: XSS
Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data (id) passed to the 'slims7cendana-master/template/default/detailtemplate.php' and 'slims7cendana-master/template/default-rtl/detailtemplate.php' URLs. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7202?
CVE-2017-7202 is classified as a medium severity vulnerability due to the potential for Cross-Site Scripting attacks.
How do I fix CVE-2017-7202?
To fix CVE-2017-7202, ensure that proper input validation and output encoding are implemented to filter user-supplied data.
What software versions are affected by CVE-2017-7202?
CVE-2017-7202 affects SLiMS 7 Cendana versions prior to 62b8ee8b51be89fc65e0d59b01c3724737f9da20.
What types of attacks can be performed using CVE-2017-7202?
CVE-2017-7202 can be exploited to perform Cross-Site Scripting (XSS) attacks, potentially allowing attackers to execute scripts in the user's browser.
Is CVE-2017-7202 a newly discovered vulnerability?
CVE-2017-7202 was discovered prior to March 16, 2017, indicating that it is not newly discovered but remains relevant for users of affected software.