CVE-2017-2123 Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.
MediumCVSS 6.1
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onethird cms | <= 1.7.3 | No fix listed |
| SpiQe Software OneThird CMS | = v1.73 Heaven's Door and earlier | No fix listed |
References
- JVN#49408248 third-party-advisory vdb-entry
- 96613 third-party-advisory vdb-entry
- onethird.net patch vendor-advisory