CVE-2017-11175 In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.
MediumCVSS 6.1
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens fin stack | = 4.0 | No fix listed |
References
- github.com exploit third-party-advisory