CVE-2017-7389: XSS
Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data (meetingid, user) passed to the 'openeclass-master/modules/tc/webconf/webconf.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7389?
The severity of CVE-2017-7389 is considered moderate due to the potential for cross-site scripting attacks.
How do I fix CVE-2017-7389?
To fix CVE-2017-7389, ensure proper filtration and validation of user-supplied data before rendering it on the output page.
What are the affected versions for CVE-2017-7389?
CVE-2017-7389 affects Openeclass versions up to and including 3.5.4.
Can CVE-2017-7389 be exploited?
Yes, CVE-2017-7389 can be exploited by an attacker to execute arbitrary HTML and scripts in the context of the user’s browser.
What components are involved in CVE-2017-7389?
CVE-2017-7389 involves the 'openeclass-master/modules/tc/webconf/webconf.php' URL where user input is insufficiently filtered.