CVE-2017-2124 Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.
MediumCVSS 6.1
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onethird cms | <= 1.7.3 | No fix listed |
| SpiQe Software OneThird CMS | = v1.73 Heaven's Door and earlier | No fix listed |
References
- JVN#13003724 third-party-advisory vdb-entry
- 98604 vdb-entry
- onethird.net patch vendor-advisory