Skip to content

CVE-2017-5964 An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "emoncms-master/Modules/vi...

MediumCVSS 6.1 EPSS 0.92%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "emoncms-master/Modules/vis/visualisations/compare.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

Affected products

ProductAffected versionsFixed in
openenergymonitor emoncms <= 9.8.0 No fix listed

References

  • 96202 third-party-advisory vdb-entry
  • github.com exploit patch vendor-advisory