CVE-2017-15948 Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin...
MediumCVSS 4.8
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grabaperch perch | = 3.0.3 | No fix listed |
References
- www.vulnerability-lab.com exploit issue-tracking patch third-party-advisory