CVE-2017-7944 XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.
MediumCVSS 6.1
EPSS 0.76%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xoops | = 2.5.8.1 | No fix listed |
References
- 97978 third-party-advisory vdb-entry
- tsublogs.wordpress.com third-party-advisory