CVE-2017-15869 Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter.
MediumCVSS 6.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| livezilla | < 7.0.8.9 | 7.0.8.9 |
References
- 20180116 ADVISORY - LiveZilla - Cross-site scripting (XSS) vulnerability in knowledgebase.php - CVE-2017-15869 exploit mailing-list third-party-advisory vdb-entry
- www.livezilla.net release-notes vendor-advisory
- www.pallas.com exploit third-party-advisory